Level Date and Time Source Event ID Task Category Information 31/08/2025 18:24:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 18:24:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 18:22:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 18:19:22 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 18:19:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 18:18:57 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 31/08/2025 18:18:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 18:17:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 18:16:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 18:15:11 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Warning 31/08/2025 18:14:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 18:12:36 disk 153 None The IO operation at logical block address 0x3d932d80 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 31/08/2025 18:12:10 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 31/08/2025 18:07:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 18:07:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 18:07:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 18:07:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 18:07:25 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Warning 31/08/2025 18:06:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 18:05:54 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Warning 31/08/2025 18:05:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 18:05:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 18:05:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1f4dd20f-be09-42d3-9729-e3839d80c0d1/) to URL group (0xFF00000020000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000020000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/570a97ec-2a8e-4e05-87bb-e52106fd16c0/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b912479b-b662-4c5f-aed5-2c0971b543f8/) from URL group (0xFE00000220000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000001. Status 0x0. Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2e4df307-944a-4359-a3bb-19dbcb79b4e1/) from URL group (0xFF00000120000001). Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b912479b-b662-4c5f-aed5-2c0971b543f8/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:37 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7776de1e-88e0-40a0-8980-cca540241e02/) from URL group (0xFF00000220000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 18:05:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2e4df307-944a-4359-a3bb-19dbcb79b4e1/) to URL group (0xFF00000120000001). Status: 0x0. Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:31 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000001. Status 0x0. Process Id 0xE44 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:05:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7776de1e-88e0-40a0-8980-cca540241e02/) to URL group (0xFF00000220000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:31 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 18:05:27 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 18:05:24 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 18:05:20 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 18:05:20 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 18:05:20 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 18:05:20 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:19 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:18 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 18:05:18 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 18:05:18 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 18:05:18 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 18:05:18 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 18:05:18 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 18:05:18 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 18:05:18 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 18:05:18 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 18:05:13 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 18:05:10 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 18:05:10 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 18:05:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 18:05:09 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:09 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:09 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 18:05:08 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:08 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:08 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 18:05:07 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T17:05:07.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T17:05:07.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 18:05:07 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T17:05:07.500000000Z. Information 31/08/2025 18:04:18 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T17:04:18.513722800Z. Information 31/08/2025 18:04:17 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 18:04:15 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 18:04:10 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000720000001. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:04:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9745f1ba-78d0-4085-a73e-14d58080ad08/) from URL group (0xFC00000720000001). Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 18:04:10 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000520000005. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:04:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f8139e50-bde0-406c-99f8-adf0af201b0b/) from URL group (0xFF00000520000005). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 18:05:20 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 18:05:20 EventLog 6005 None The Event log service was started. Information 31/08/2025 18:05:20 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 18:04:10 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 18:04:10 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 18:04:10 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 18:04:10 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 18:04:10 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 18:04:10 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 18:04:04 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 18:04:02 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 18:04:02 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 18:03:50 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int ip reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 31/08/2025 18:03:45 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 31/08/2025 18:01:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 21 keys and creating 9 modified pages. Information 31/08/2025 18:01:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 20 keys and creating 5 modified pages. Information 31/08/2025 18:01:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 2 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenub_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\8eb37732c02a75ce_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenua_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a74c416bf60c1d4d_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\2b405c76c27e763b_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:01:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 18:00:14 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Warning 31/08/2025 17:47:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 17:39:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 31/08/2025 17:38:43 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy7) is healthy. No action is needed. Information 31/08/2025 17:36:51 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 17:36:51 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 31/08/2025 17:36:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 17:36:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 17:36:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 17:35:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 31/08/2025 17:35:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 7 modified pages. Information 31/08/2025 17:35:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Warning 31/08/2025 17:35:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 17:35:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 17:35:02 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 17:35:01 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎31T14:21:55.754137800Z Wake Time: ‎2025‎-‎08‎-‎31T16:35:00.482403100Z Wake Source: Unknown" Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 185" Information 31/08/2025 17:35:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f8139e50-bde0-406c-99f8-adf0af201b0b/) to URL group (0xFF00000520000005). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 17:35:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000520000005. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 17:35:00 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 17:35:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f8139e50-bde0-406c-99f8-adf0af201b0b/) from URL group (0xFE00000720000003). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 17:35:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 185" Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 31/08/2025 17:35:00 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 17:34:57 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎31T16:34:57.500000000Z from ‎2025‎-‎08‎-‎31T14:22:00.112893600Z. Time Delta: 7977387 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎31T17:34:57.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 31/08/2025 15:22:00 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 31/08/2025 15:21:55 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 31/08/2025 15:21:55 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 185" Information 31/08/2025 15:21:55 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 31/08/2025 15:21:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 15:21:53 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5062 milliseconds. Warning 31/08/2025 15:21:53 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 15:21:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 15:15:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 19684. Information 31/08/2025 15:13:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9745f1ba-78d0-4085-a73e-14d58080ad08/) to URL group (0xFC00000720000001). Status: 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:13:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000720000001. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:13:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:13:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ce4682b5-5b09-43e3-bfb4-80259b3e2646/) from URL group (0xFE00000620000003). Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:13:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f8139e50-bde0-406c-99f8-adf0af201b0b/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:13:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:13:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000004. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:13:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9cd957c9-2711-4813-99cb-18aa5c61d198/) from URL group (0xFE00000020000004). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 15:12:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 15:11:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 15:10:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 15:09:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9cd957c9-2711-4813-99cb-18aa5c61d198/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:09:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000004. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:09:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ce4682b5-5b09-43e3-bfb4-80259b3e2646/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:09:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000003. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 15:09:13 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 19684. Information 31/08/2025 15:08:22 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:08:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) from URL group (0xFE00000020000003). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:08:22 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:08:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/be7f1cc2-3689-4153-9118-5cbdac2f0d9e/) from URL group (0xFE00000320000001). Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 15:08:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:07:58 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy6) is healthy. No action is needed. Information 31/08/2025 15:07:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:07:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:07:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:07:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 31/08/2025 15:06:28 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 15:06:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 15:06:28 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 15:06:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 15:05:39 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 15:05:39 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 31/08/2025 15:05:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 15:05:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 15:05:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 15:04:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 15:04:16 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 15:04:15 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎31T14:01:27.226620700Z Wake Time: ‎2025‎-‎08‎-‎31T14:04:14.485148300Z Wake Source: Unknown" Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 185" Information 31/08/2025 15:04:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:04:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:04:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:04:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) from URL group (0xFE00000120000003). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 185" Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 31/08/2025 15:04:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 15:04:11 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎31T14:04:11.500000000Z from ‎2025‎-‎08‎-‎31T14:01:29.064224100Z. Time Delta: 162435 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎31T15:04:11.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 31/08/2025 15:01:29 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 31/08/2025 15:01:27 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 31/08/2025 15:01:27 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 185" Information 31/08/2025 15:01:27 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 31/08/2025 15:01:26 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 15:01:24 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5000 milliseconds. Warning 31/08/2025 15:00:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 14:59:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 14:59:16 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy5) is healthy. No action is needed. Warning 31/08/2025 14:58:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 14:57:44 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 14:57:44 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 31/08/2025 14:57:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 14:57:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:57:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:57:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:57:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:57:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 31/08/2025 14:56:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 14:55:23 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 14:55:22 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎31T11:51:21.328918700Z Wake Time: ‎2025‎-‎08‎-‎31T13:55:21.491978500Z Wake Source: Unknown" Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 185" Information 31/08/2025 14:55:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:55:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000003. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:55:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:55:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) from URL group (0xFE00000120000002). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 14:55:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 185" Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 31/08/2025 14:55:21 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 14:55:18 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎31T13:55:18.500000000Z from ‎2025‎-‎08‎-‎31T11:51:23.833110100Z. Time Delta: 7434666 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎31T14:55:18.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 31/08/2025 12:51:23 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 31/08/2025 12:51:21 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 31/08/2025 12:51:21 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 185" Information 31/08/2025 12:51:21 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 31/08/2025 12:51:21 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 12:51:19 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Warning 31/08/2025 12:51:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 12:51:09 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 12:51:02 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Warning 31/08/2025 12:50:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:46:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 12:45:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000002). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000002). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000001). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000001). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:17 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy4) is healthy. No action is needed. Information 31/08/2025 12:43:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:43:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:42:37 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:42:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:42:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:42:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:42:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1714 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:42:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 12:41:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 12:40:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 12:40:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:40:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 12:40:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:40:17 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy3) is healthy. No action is needed. Warning 31/08/2025 12:40:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 12:39:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:39:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:38:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/06596ef8-d86d-493f-bef0-8a6adca03675/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 12:38:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bc032f92-ed52-478a-bfe8-2d629540fd85/) from URL group (0xFE00000020000001). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bc032f92-ed52-478a-bfe8-2d629540fd85/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/be7f1cc2-3689-4153-9118-5cbdac2f0d9e/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xEB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1d147674-1e2a-4293-a446-92a69edc5a28/) from URL group (0xFE00000120000001). Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:48 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 12:38:44 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:38:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 12:38:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1d147674-1e2a-4293-a446-92a69edc5a28/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x300 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:39 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:38:38 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 12:38:38 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:38:38 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 12:38:38 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:38 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:37 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 12:38:37 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 12:38:37 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 12:38:37 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 12:38:37 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 12:38:37 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 12:38:37 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 12:38:37 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 12:38:37 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 12:38:32 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 12:38:29 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 12:38:29 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 12:38:29 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:38:28 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:28 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:28 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 12:38:27 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:27 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:27 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:38:26 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T11:38:26.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T11:38:25.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 12:38:26 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T11:38:26.500000000Z. Information 31/08/2025 12:37:36 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T11:37:36.110959100Z. Information 31/08/2025 12:37:35 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 12:37:32 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 12:37:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:37:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ff599e10-fb99-462c-aca1-4a8749223931/) from URL group (0xFE00000020000001). Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:37:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:37:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/34c0bb28-1c55-4cf8-a5d5-4fb1c85aebe5/) from URL group (0xFE00000320000001). Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:37:27 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 12:37:27 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 12:38:38 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 12:38:38 EventLog 6005 None The Event log service was started. Information 31/08/2025 12:38:38 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 12:37:27 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 12:37:27 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 12:37:27 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 12:37:27 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 12:37:27 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 12:37:22 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 31/08/2025 12:37:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/34c0bb28-1c55-4cf8-a5d5-4fb1c85aebe5/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:37:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:37:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ff599e10-fb99-462c-aca1-4a8749223931/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:37:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 12:37:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10292. Warning 31/08/2025 12:37:08 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 12:37:08 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server 5319275A.WhatsAppDesktop_2.2534.2.0_x64__cv1g1gvanyjgm!App.AppXagyrmpyx1bhhy2gjpvcnfecxpg298mss.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.YourPhone_1.25081.83.0_x64__8wekyb3d8bbwe!App.AppXn958k7nsj8mxxmsepqdam8xk948t30sc.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.234.0_x64__cw5n1h2txyewy!Global.RulesEngine.AppX5z5kfs8055rf6ttb3wq8ztd1bbgncvdy.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.234.0_x64__cw5n1h2txyewy!WebExperienceHost.AppXtxeqzv5qynpmss219yp8y0zwb6g7a52b.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.234.0_x64__cw5n1h2txyewy!Global.wsw.AppXbpznhsbbkvsdm7pkfchmg1kd1qjrcbxb.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.StorePurchaseApp_22506.1401.4.0_x64__8wekyb3d8bbwe!App.AppXh68f74x901gdx01kwdh3szc5yp7bnmah.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.OOBE_1000.26100.15.0_x64__cw5n1h2txyewy!OobeHost.AppX6bj56gpfgc90p49thdxsnj5be6r7f6yq.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.YourPhone_1.25081.83.0_x64__8wekyb3d8bbwe!App.AppXn958k7nsj8mxxmsepqdam8xk948t30sc.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:07 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.WindowsStore_22507.1401.6.0_x64__8wekyb3d8bbwe!App.AppX19ds9cm7f9evc4x8ayz8h1c2dprymvye.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:06 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.YourPhone_1.25081.83.0_x64__8wekyb3d8bbwe!App.AppXn958k7nsj8mxxmsepqdam8xk948t30sc.mca did not register with DCOM within the required timeout. Error 31/08/2025 12:37:06 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Warning 31/08/2025 12:37:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s08.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4152. Information 31/08/2025 12:37:00 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 12:36:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:36:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bf72dd90-93d5-478d-b764-469bff458d37/) from URL group (0xFE00000420000001). Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:36:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:36:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b17e83d4-1098-45a8-b3b4-3dafdc9cb6b4/) from URL group (0xFE00000220000001). Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 12:35:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:34:59 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:34:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b17e83d4-1098-45a8-b3b4-3dafdc9cb6b4/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:34:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xEF4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:34:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bf72dd90-93d5-478d-b764-469bff458d37/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:34:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 12:34:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 12:33:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 12:33:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:33:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 12:33:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:32:54 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed. Warning 31/08/2025 12:32:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:32:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:31:46 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 12:31:43 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:31:41 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:31:37 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 12:31:37 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:31:37 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 12:31:37 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:37 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:36 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 12:31:36 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 12:31:36 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 12:31:36 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 12:31:35 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 12:31:35 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 12:31:35 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 12:31:35 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 12:31:35 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 12:31:31 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 12:31:28 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 12:31:28 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 12:31:28 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:31:27 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:27 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:27 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 12:31:26 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:26 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:26 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:26 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:31:25 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T11:31:25.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T11:31:24.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 12:31:25 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T11:31:25.500000000Z. Information 31/08/2025 12:30:32 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T11:30:32.298063900Z. Information 31/08/2025 12:30:31 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 12:30:30 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 12:30:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:30:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5d0696e7-2a17-4086-ad31-121bd5c24907/) from URL group (0xFE00000120000005). Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:30:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000005. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:30:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f9a6cb45-80a6-491f-8d3e-046eba49e606/) from URL group (0xFE00000020000005). Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:31:37 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 12:31:37 EventLog 6005 None The Event log service was started. Information 31/08/2025 12:31:37 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 12:30:25 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 12:30:25 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 12:30:25 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 12:30:25 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 12:30:25 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 12:30:25 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 12:30:25 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 12:30:23 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 12:30:18 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Information 31/08/2025 12:30:11 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 12:29:23 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int ip reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 31/08/2025 12:29:07 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Warning 31/08/2025 12:28:05 disk 153 None The IO operation at logical block address 0x5a5318 for Disk 0 (PDO name: \Device\00000030) was retried. Information 31/08/2025 12:28:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f9a6cb45-80a6-491f-8d3e-046eba49e606/) to URL group (0xFE00000020000005). Status: 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:28:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000005. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:28:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5d0696e7-2a17-4086-ad31-121bd5c24907/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:28:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:27:32 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from disabled to demand start. Information 31/08/2025 12:27:17 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 31/08/2025 12:20:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 12:20:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 12:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/32f22c46-4747-4a20-aa1b-59ac1d048c0d/) from URL group (0xFE00000220000001). Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/939c6733-5579-49a7-9af3-368bd916b955/) from URL group (0xFE00000320000001). Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:18:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 12:18:48 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Information 31/08/2025 12:18:00 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 31/08/2025 12:16:39 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 12:13:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:13:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\AC\GEH\POF.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 12:13:15 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:13:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:12:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000004). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000003). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:12:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:11:30 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 31/08/2025 12:11:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:11:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000003). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:11:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:11:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:10:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000004). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 31/08/2025 12:09:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000004). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000003). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000003). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:09:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000003). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 12:08:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:08:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:08:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:07:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:07:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:07:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x17B4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:07:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 12:06:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 31/08/2025 12:03:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 12:03:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 12:03:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:03:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 12:02:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 12:02:04 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Warning 31/08/2025 12:01:50 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:01:50 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:01:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/939c6733-5579-49a7-9af3-368bd916b955/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/32f22c46-4747-4a20-aa1b-59ac1d048c0d/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:01:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:01:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/48950f31-c35b-4c1e-b38f-ddabd99599e0/) from URL group (0xFE00000020000002). Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000001. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:01:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f7fc9cd0-6f8f-4a4f-bb93-bd16662db62f/) from URL group (0xFC00000020000001). Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:01:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 12:01:35 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/48950f31-c35b-4c1e-b38f-ddabd99599e0/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/fe89a0a5-9205-4989-8126-ffb52d66dff2/) from URL group (0xFE00000020000001). Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f7fc9cd0-6f8f-4a4f-bb93-bd16662db62f/) to URL group (0xFC00000020000001). Status: 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 12:01:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000001. Status 0x0. Process Id 0xE40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 12:01:28 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:01:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 12:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/fe89a0a5-9205-4989-8126-ffb52d66dff2/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x474 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 12:01:23 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 12:01:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:01:23 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 12:01:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:23 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:22 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 12:01:22 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 12:01:22 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 12:01:21 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 12:01:21 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 12:01:21 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 12:01:21 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 12:01:21 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 12:01:21 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 12:01:17 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 12:01:14 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 12:01:14 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 12:01:14 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 12:01:13 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:13 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:13 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 12:01:12 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:12 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:12 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 12:01:11 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T11:01:11.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T11:01:11.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 12:01:11 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T11:01:11.500000000Z. Information 31/08/2025 11:59:08 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T10:59:08.999663400Z. Information 31/08/2025 11:59:08 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 11:59:07 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 12:01:23 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 12:01:23 EventLog 6005 None The Event log service was started. Information 31/08/2025 12:01:23 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 11:59:02 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 11:59:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 11:59:02 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 11:59:02 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 11:59:02 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 11:59:02 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 11:59:02 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 11:58:56 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 11:58:55 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5062 milliseconds. Warning 31/08/2025 11:58:55 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Error 31/08/2025 11:58:52 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Information 31/08/2025 11:58:49 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 11:58:44 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Warning 31/08/2025 11:56:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 11:56:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 11:56:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 11:56:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 11:55:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/a9069146-46fd-4d7a-8dda-a32659873f34/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/4cd711e0-ede0-41c4-bc12-8edfa6bf456d/) from URL group (0xFE00000020000002). Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/36f08366-6c03-4423-b734-649551781b12/) to URL group (0xFC00000020000001). Status: 0x0. Process Id 0xED0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 11:55:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000001. Status 0x0. Process Id 0xED0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Error 31/08/2025 11:55:20 Microsoft-Windows-DeviceAssociationService 3509 (7000) Device Association Failed - Select Ceremony. Information 31/08/2025 11:54:44 Service Control Manager 7040 None The start type of the Realtek RTOTS640 NT Driver service was changed from demand start to disabled. Information 31/08/2025 11:54:43 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy7) is healthy. No action is needed. Warning 31/08/2025 11:54:31 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:54:31 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 11:54:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/4cd711e0-ede0-41c4-bc12-8edfa6bf456d/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:54:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:54:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:54:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/608b3e9b-1b04-4ff5-a0bd-f37b0ab3850c/) from URL group (0xFE00000020000001). Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:54:26 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek RTOTS640 NT Driver Service File Name: \SystemRoot\System32\drivers\rtots640x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 31/08/2025 11:54:23 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 11:54:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/608b3e9b-1b04-4ff5-a0bd-f37b0ab3850c/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:54:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x824 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 11:54:07 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 11:54:06 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:54:02 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 11:54:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 11:54:02 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 11:54:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:02 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:54:01 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 11:54:01 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 11:54:01 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 11:54:01 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 11:54:00 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 11:54:00 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 11:54:00 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 11:54:00 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 11:54:00 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 11:53:56 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 11:53:53 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 11:53:53 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 11:53:53 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:53 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:53:52 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:52 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 11:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:53:50 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was false. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T10:53:50.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T10:53:50.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 11:53:50 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T10:53:50.500000000Z. Information 31/08/2025 11:51:59 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T10:51:59.368537600Z. Information 31/08/2025 11:51:58 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 11:51:57 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 11:54:02 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 11:54:02 EventLog 6005 None The Event log service was started. Information 31/08/2025 11:54:02 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 11:51:52 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 11:51:52 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 11:51:52 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 11:51:52 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 11:51:52 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 11:51:52 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 11:51:52 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 11:51:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000001). Process Id 0x1590 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:51:46 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 11:51:45 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5109 milliseconds. Warning 31/08/2025 11:51:45 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5093 milliseconds. Error 31/08/2025 11:51:45 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Information 31/08/2025 11:51:39 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 11:51:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy6) is healthy. No action is needed. Warning 31/08/2025 11:49:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 11:49:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 11:49:28 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 31/08/2025 11:49:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 11:48:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x1590 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:48:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1590 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:48:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1590 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:48:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 11:48:11 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy5) is healthy. No action is needed. Warning 31/08/2025 11:47:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 11:47:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8cd68a4a-2279-4fbe-9b13-bb98e29ca46c/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xE50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 11:47:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xE50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 11:47:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b1b0ce29-ef28-4475-995b-a42324f2218f/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x67C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:47:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x67C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 11:47:29 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_35512c92865e87de\rt25cx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 31/08/2025 11:47:27 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 11:47:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:17 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 11:47:15 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 11:47:12 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 11:47:12 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 11:47:12 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 11:47:12 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:11 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:10 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 11:47:10 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 11:47:10 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 11:47:10 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 11:47:10 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 11:47:10 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 11:47:10 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 11:47:10 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 11:47:10 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 11:47:04 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 11:47:03 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 11:47:02 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 11:47:02 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 11:47:02 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 11:47:01 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 31/08/2025 11:47:01 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:01 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:00 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 11:47:00 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:00 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:00 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:47:00 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 11:46:59 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 11:47:12 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 11:47:12 EventLog 6005 None The Event log service was started. Information 31/08/2025 11:47:12 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Error 31/08/2025 11:47:12 EventLog 6008 None The previous system shutdown at 3:45:58 AM on ‎8/‎31/‎2025 was unexpected. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Error 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 29 None Windows failed fast startup with error status 0xC000007B. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T10:46:59.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T10:46:59.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 11:46:59 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T10:46:59.500000000Z. Warning 31/08/2025 03:49:09 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:49:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:49:09 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:49:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:48:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:48:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:48:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:48:11 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 03:47:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:47:20 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy4) is healthy. No action is needed. Warning 31/08/2025 03:46:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:46:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:46:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:46:09 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 03:46:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:46:02 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:45:58 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 03:45:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:45:58 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 03:45:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:58 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:57 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 03:45:57 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 03:45:57 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 03:45:56 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 03:45:56 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 03:45:56 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 03:45:56 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 03:45:56 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 03:45:56 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 03:45:52 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 03:45:49 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 03:45:49 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 03:45:49 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:49 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:45:48 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:48 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 03:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:45:46 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T02:45:46.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T02:45:46.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 03:45:46 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T02:45:46.500000000Z. Information 31/08/2025 03:44:55 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T02:44:55.791054900Z. Information 31/08/2025 03:44:55 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 03:44:53 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 03:45:58 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 03:45:58 EventLog 6005 None The Event log service was started. Information 31/08/2025 03:45:58 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 03:44:48 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:44:48 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 03:44:48 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:44:48 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 03:44:48 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 03:44:48 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 03:44:42 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 03:44:40 winsrvext 100 None Process C:\Users\rupes\AppData\Local\Temp\{98535F57-3FF7-47EF-9B87-BF7DC5203C01}\setup.exe is delaying system shutdown after 10953 milliseconds. Information 31/08/2025 03:44:35 Application Popup 26 None Application popup: idle_report.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application. Warning 31/08/2025 03:44:34 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 31/08/2025 03:44:34 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 03:44:27 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 31/08/2025 03:42:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:42:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:42:44 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 03:42:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:42:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:41:45 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy3) is healthy. No action is needed. Warning 31/08/2025 03:40:48 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:40:48 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:40:43 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 03:40:34 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:40:33 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:40:29 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 03:40:29 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:40:29 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 03:40:29 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:29 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:28 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 03:40:28 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 03:40:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 03:40:28 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 03:40:27 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 03:40:27 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 03:40:27 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 03:40:27 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 03:40:27 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 03:40:23 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 03:40:20 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 03:40:20 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 03:40:20 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:40:19 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:19 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:19 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 03:40:18 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:18 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:18 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:40:17 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T02:40:17.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T02:40:17.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 03:40:17 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T02:40:17.500000000Z. Information 31/08/2025 03:39:26 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T02:39:26.532356300Z. Information 31/08/2025 03:39:25 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 03:39:23 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 03:40:29 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 03:40:29 EventLog 6005 None The Event log service was started. Information 31/08/2025 03:40:29 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 03:39:18 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:39:18 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 03:39:18 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:39:18 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 03:39:18 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 03:39:18 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 03:39:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 03:39:14 winsrvext 100 None Process C:\Users\rupes\AppData\Local\Temp\{F6C0E778-6B58-4E7E-9BE3-64E98DB4C42A}\setup.exe is delaying system shutdown after 7015 milliseconds. Warning 31/08/2025 03:39:12 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 03:39:12 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 03:39:03 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 03:36:24 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Warning 31/08/2025 03:33:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:33:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:33:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 03:33:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:33:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:32:48 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed. Warning 31/08/2025 03:31:52 disk 153 None The IO operation at logical block address 0x7434e9e0 for Disk 0 (PDO name: \Device\00000030) was retried. Information 31/08/2025 03:31:44 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 03:31:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:30 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:31:29 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:31:25 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 03:31:25 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:31:25 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 03:31:25 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:24 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 03:31:24 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 03:31:24 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 03:31:24 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 03:31:24 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 03:31:24 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 03:31:23 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 03:31:23 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 03:31:23 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 03:31:19 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 03:31:16 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 03:31:16 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 03:31:16 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:31:15 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:15 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:15 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 03:31:14 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:14 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:14 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:14 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:31:13 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T02:31:13.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T02:31:12.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 03:31:13 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T02:31:13.500000000Z. Information 31/08/2025 03:30:22 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T02:30:22.327912400Z. Information 31/08/2025 03:30:21 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 03:30:19 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 03:30:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:30:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2aecda0b-f097-410a-a35f-84d95cd77f61/) from URL group (0xFE00000120000002). Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:30:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:30:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/85f4ff61-6f78-499a-b464-224a8d9b7c2c/) from URL group (0xFE00000020000001). Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:31:25 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 03:31:25 EventLog 6005 None The Event log service was started. Information 31/08/2025 03:31:25 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 03:30:14 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:30:14 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 03:30:14 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 03:30:14 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:30:14 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 03:30:14 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 03:30:14 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 03:30:12 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 03:30:11 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 31/08/2025 03:30:11 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 31/08/2025 03:30:01 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 03:22:05 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int ip reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 31/08/2025 03:21:55 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 31/08/2025 03:21:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 03:17:17 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:17:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:17:17 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:17:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:14:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:10:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:09:35 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from disabled to demand start. Information 31/08/2025 03:09:20 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed. Information 31/08/2025 03:08:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/85f4ff61-6f78-499a-b464-224a8d9b7c2c/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:08:03 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:08:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2aecda0b-f097-410a-a35f-84d95cd77f61/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:08:03 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:07:57 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:06:21 Service Control Manager 7040 None The start type of the TunnelBear Adapter V9 service was changed from demand start to disabled. Information 31/08/2025 03:04:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 03:04:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:04:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 03:04:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:04:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 03:03:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 03:03:26 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy1) is healthy. No action is needed. Information 31/08/2025 03:03:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:03:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/93269d18-a3a5-44a2-a645-1b198f480d01/) from URL group (0xFE00000220000001). Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:03:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:03:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d58b0245-ddae-4b9a-8359-08fab481612f/) from URL group (0xFE00000120000001). Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:03:06 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Warning 31/08/2025 03:02:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:02:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:02:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/93269d18-a3a5-44a2-a645-1b198f480d01/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:37 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000002. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/57c9985c-7eb5-430a-bdf5-50a1a634b27f/) from URL group (0xFE00000320000002). Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d58b0245-ddae-4b9a-8359-08fab481612f/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/df10f305-edcc-4bde-88c0-7ecb962efcc2/) from URL group (0xFE00000420000001). Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 03:02:27 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/57c9985c-7eb5-430a-bdf5-50a1a634b27f/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000002. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/df10f305-edcc-4bde-88c0-7ecb962efcc2/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0xE4C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5fe94c4b-2072-48da-b8e1-3cc8a3a89281/) from URL group (0xFE00000320000001). Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5fe94c4b-2072-48da-b8e1-3cc8a3a89281/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 03:02:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7C4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 03:02:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:02:19 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 03:02:15 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 03:02:15 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:02:15 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 03:02:15 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:14 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 03:02:14 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 03:02:14 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 03:02:13 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 03:02:13 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 03:02:13 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 03:02:13 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 03:02:13 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 03:02:13 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 03:02:09 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 03:02:06 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 03:02:06 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 03:02:06 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 03:02:05 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:05 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:05 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 03:02:04 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:04 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:04 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 03:02:03 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T02:02:03.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T02:02:03.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 03:02:03 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T02:02:03.500000000Z. Information 31/08/2025 03:00:30 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T02:00:30.761292500Z. Information 31/08/2025 03:00:30 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 03:00:30 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 03:02:15 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 03:02:15 EventLog 6005 None The Event log service was started. Information 31/08/2025 03:02:15 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 03:00:25 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:00:25 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 03:00:25 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 03:00:25 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 03:00:25 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 03:00:25 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 03:00:25 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 03:00:22 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 03:00:19 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 31/08/2025 03:00:19 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 31/08/2025 03:00:12 User32 1074 None "The process C:\WINDOWS\system32\winlogon.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Warning 31/08/2025 02:59:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:58:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:55:55 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed. Information 31/08/2025 02:54:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 02:54:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:54:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:54:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 02:53:58 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:53:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:53:28 Service Control Manager 7040 None The start type of the Realtek RTOTS640 NT Driver service was changed from demand start to disabled. Warning 31/08/2025 02:53:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5f9db1fb-5bd8-48bd-8269-7a38499f1070/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/fe2b3da1-95ec-4c0f-96ec-bb1244cbc26a/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2c443f73-779f-466f-9e5e-cf6cb19a58c4/) from URL group (0xFE00000220000002). Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:53:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/35adafe2-d723-45aa-8348-e97b24db2690/) from URL group (0xFE00000020000003). Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:56 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy1) is healthy. No action is needed. Warning 31/08/2025 02:52:12 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:52:12 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:52:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2c443f73-779f-466f-9e5e-cf6cb19a58c4/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:12 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/73141a33-561f-41e5-bfc8-eae55f852ee6/) from URL group (0xFE00000320000001). Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/73141a33-561f-41e5-bfc8-eae55f852ee6/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/35adafe2-d723-45aa-8348-e97b24db2690/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:10 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:10 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/cda222f5-d227-43b5-a0ac-f788018abc83/) from URL group (0xFE00000120000001). Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:52:10 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000320000005. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/57e72ba8-0b3b-41af-a9b3-bf636d366e69/) from URL group (0xFF00000320000005). Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/57e72ba8-0b3b-41af-a9b3-bf636d366e69/) to URL group (0xFF00000320000005). Status: 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:04 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000320000005. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:04 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/fd7c88e5-96ee-49be-a387-43c4351a96ed/) from URL group (0xFE00000220000001). Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:52:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 02:51:59 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 02:51:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/cda222f5-d227-43b5-a0ac-f788018abc83/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:51:58 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x7D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 02:51:52 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:51:51 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 02:51:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/fd7c88e5-96ee-49be-a387-43c4351a96ed/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:51:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xE68 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:51:47 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 02:51:47 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 02:51:47 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 02:51:47 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:46 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 02:51:46 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 02:51:46 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 02:51:45 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 02:51:45 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 02:51:45 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 02:51:45 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 02:51:45 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 02:51:45 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 02:51:41 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 02:51:38 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 02:51:38 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:51:38 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 02:51:37 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:37 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:37 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 02:51:36 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:36 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:36 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:51:35 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T01:51:35.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T01:51:35.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 02:51:35 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T01:51:35.500000000Z. Information 31/08/2025 02:49:44 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T01:49:44.291459300Z. Information 31/08/2025 02:49:44 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 02:49:43 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 02:51:47 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 02:51:47 EventLog 6005 None The Event log service was started. Information 31/08/2025 02:51:47 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 02:49:38 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 02:49:38 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 02:49:38 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 02:49:38 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 02:49:38 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 02:49:38 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 02:49:38 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 02:49:33 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 02:49:32 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 02:49:32 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5079 milliseconds. Information 31/08/2025 02:49:23 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 31/08/2025 02:46:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6397c6b5-ba31-4977-8af7-74f5e62c2818/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000002. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000220000008. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1cd28692-b1ce-4b40-b36c-59fd07ea344b/) from URL group (0xFF00000220000008). Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/4c0d1b8d-912d-435b-a3c9-20939d641b62/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000002. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:44:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/37fe97f9-a7af-480c-86d5-02bab3637401/) from URL group (0xFE00000720000001). Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1cd28692-b1ce-4b40-b36c-59fd07ea344b/) to URL group (0xFF00000220000008). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000008. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/4cc43c6c-fcd1-448a-84ab-347c520041f5/) from URL group (0xFE00000020000002). Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/37fe97f9-a7af-480c-86d5-02bab3637401/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:30 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:30 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5d69899f-cc2f-4eb5-aac0-18d4240d3c1d/) from URL group (0xFE00000620000001). Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/4cc43c6c-fcd1-448a-84ab-347c520041f5/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:43:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5d69899f-cc2f-4eb5-aac0-18d4240d3c1d/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:43:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:42:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:42:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6843bbfa-89b7-4d37-8d74-6ad9b1ab0564/) from URL group (0xFE00000020000001). Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:42:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000120000002. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:42:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/4d386c32-fa2d-4693-96a9-ce93403369fd/) from URL group (0xFD00000120000002). Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:42:10 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name www.googleadservices.com timed out after none of the configured DNS servers responded. Client PID 19360. Information 31/08/2025 02:37:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6843bbfa-89b7-4d37-8d74-6ad9b1ab0564/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:37:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b82d8ff9-95df-4062-9b92-9b1f958759cb/) from URL group (0xFE00000320000001). Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/4d386c32-fa2d-4693-96a9-ce93403369fd/) to URL group (0xFD00000120000002). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000120000002. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:37:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ff9cefe6-c596-497c-a51a-2b32ce3fe881/) from URL group (0xFE00000220000001). Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:37:21 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:37:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:36:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:36:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b82d8ff9-95df-4062-9b92-9b1f958759cb/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f2379cf1-6e1a-49e0-92dc-68ed8c081c80/) from URL group (0xFC00000120000001). Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ff9cefe6-c596-497c-a51a-2b32ce3fe881/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:36:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/43dbb8a7-8268-4542-a37a-1ec7741f060f/) from URL group (0xFE00000120000001). Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:36:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:36:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:36:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 02:36:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 02:36:29 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl.acronis.com timed out after none of the configured DNS servers responded. Client PID 7860. Information 31/08/2025 02:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f2379cf1-6e1a-49e0-92dc-68ed8c081c80/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0x7C8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/43dbb8a7-8268-4542-a37a-1ec7741f060f/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xE04 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:36:16 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name fd.api.iris.microsoft.com timed out after none of the configured DNS servers responded. Client PID 13620. Warning 31/08/2025 02:36:10 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name v6.ipv6-test.com timed out after none of the configured DNS servers responded. Client PID 4376. Warning 31/08/2025 02:36:08 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10440. Warning 31/08/2025 02:36:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name events.gfe.nvidia.com timed out after none of the configured DNS servers responded. Client PID 13196. Warning 31/08/2025 02:36:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name app.livedrive.com timed out after none of the configured DNS servers responded. Client PID 11504. Warning 31/08/2025 02:36:01 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name v10.events.data.microsoft.com timed out after none of the configured DNS servers responded. Client PID 2172. Information 31/08/2025 02:35:42 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy1) is healthy. No action is needed. Warning 31/08/2025 02:34:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:34:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:34:18 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 02:34:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:34:12 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:09 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 02:34:08 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 02:34:08 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 02:34:08 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 02:34:08 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:08 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:34:07 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 02:34:07 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 02:34:07 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 02:34:07 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 02:34:07 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 02:34:07 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 02:34:07 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 02:34:07 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 02:34:07 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 02:34:02 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 02:33:59 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 02:33:59 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 02:33:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 02:33:58 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:58 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:58 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 02:33:57 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:57 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:57 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 02:33:56 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T01:33:56.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T01:33:56.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 02:33:56 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T01:33:56.500000000Z. Information 31/08/2025 02:32:54 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T01:32:54.916110200Z. Information 31/08/2025 02:32:54 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 02:32:54 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 02:34:08 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 02:34:08 EventLog 6005 None The Event log service was started. Information 31/08/2025 02:34:08 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 02:32:49 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 02:32:49 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 02:32:49 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 02:32:49 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 02:32:49 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 02:32:49 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 02:32:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 02:32:42 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5047 milliseconds. Information 31/08/2025 02:32:40 Application Popup 26 None Application popup: idle_report.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application. Warning 31/08/2025 02:32:37 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 31/08/2025 02:32:37 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 31/08/2025 02:32:29 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 02:32:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Warning 31/08/2025 02:31:13 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:30:55 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:30:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3900. Information 31/08/2025 02:30:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000005. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:30:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/c34e2d65-acf1-40f3-a40e-f04aa56da128/) from URL group (0xFE00000620000005). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:30:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000003. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:30:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ff74216a-af67-40af-877c-5e07c4725992/) from URL group (0xFE00000320000003). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:30:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/c34e2d65-acf1-40f3-a40e-f04aa56da128/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:30:06 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000005. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:30:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ff74216a-af67-40af-877c-5e07c4725992/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:30:06 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000003. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:29:06 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Information 31/08/2025 02:28:58 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:28:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/a3ab72ce-f72d-40b8-8bc6-50a39adae546/) from URL group (0xFE00000020000003). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:28:58 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000004. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:28:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5649d825-dbe8-4f39-93f5-718a3ac6edc9/) from URL group (0xFE00000620000004). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:28:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/a3ab72ce-f72d-40b8-8bc6-50a39adae546/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:28:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:28:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5649d825-dbe8-4f39-93f5-718a3ac6edc9/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:28:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000004. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b95d858d-568c-4db4-8d8a-07db1bd5e7db/) from URL group (0xFE00000020000002). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000720000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/190ab900-94e8-4110-ba6d-889bd50ea9de/) from URL group (0xFF00000720000001). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:24:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b95d858d-568c-4db4-8d8a-07db1bd5e7db/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:24:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:24:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/190ab900-94e8-4110-ba6d-889bd50ea9de/) to URL group (0xFF00000720000001). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:24:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000720000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:24:05 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:24:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:23:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:23:53 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 11144. Warning 31/08/2025 02:23:53 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:23:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:23:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:23:19 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:23:12 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:23:12 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s08.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3900. Warning 31/08/2025 02:23:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:23:01 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:22:58 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s17.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3900. Warning 31/08/2025 02:22:54 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:22:49 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name t8.dropbox.com timed out after none of the configured DNS servers responded. Client PID 20060. Warning 31/08/2025 02:22:46 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 11144. Warning 31/08/2025 02:22:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:22:39 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:22:38 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3900. Warning 31/08/2025 02:22:35 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:22:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 11144. Warning 31/08/2025 02:22:24 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:22:24 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:22:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:21:45 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl-debug.dropbox.com timed out after none of the configured DNS servers responded. Client PID 19636. Warning 31/08/2025 02:21:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 11144. Warning 31/08/2025 02:21:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:21:26 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s08.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3900. Information 31/08/2025 02:21:22 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:21:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9cfcb66e-94bf-416b-86a1-7f9a259571fb/) from URL group (0xFE00000620000003). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:21:22 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000006. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:21:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e25ae755-08e8-4ce5-a01d-ce26906be190/) from URL group (0xFF00000120000006). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:21:12 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:21:05 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Information 31/08/2025 02:20:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9cfcb66e-94bf-416b-86a1-7f9a259571fb/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:20:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000003. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:20:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e25ae755-08e8-4ce5-a01d-ce26906be190/) to URL group (0xFF00000120000006). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:20:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000006. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:20:51 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Warning 31/08/2025 02:20:49 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ssl.gstatic.com timed out after none of the configured DNS servers responded. Client PID 16952. Information 31/08/2025 02:20:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000002. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:20:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/44a72ae1-67bb-43ce-ad60-54d19908fbe3/) from URL group (0xFE00000320000002). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 02:20:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 02:20:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/12d01a14-e09e-445e-a377-1b7459ae2c0f/) from URL group (0xFE00000120000001). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 02:20:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-cinfo-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 3900. Warning 31/08/2025 02:20:28 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14184. Warning 31/08/2025 02:20:23 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 12724. Information 31/08/2025 02:17:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 02:13:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Warning 31/08/2025 02:03:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 02:00:51 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 02:00:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Warning 31/08/2025 01:49:16 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:49:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:49:16 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:49:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 01:47:06 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 31/08/2025 01:43:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 31/08/2025 01:38:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:36:28 disk 153 None The IO operation at logical block address 0x3cd55270 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 31/08/2025 01:35:02 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 01:34:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 01:34:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:34:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 01:32:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:32:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:32:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:32:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:32:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:32:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000002). Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:31:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000002). Status: 0x0. Process Id 0x16A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:31:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 01:31:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Warning 31/08/2025 01:31:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:30:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 01:28:01 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 31/08/2025 01:26:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 31/08/2025 01:26:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 31/08/2025 01:26:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 31/08/2025 01:26:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 31/08/2025 01:24:54 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2025-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2 for x64 (KB5064401) Information 31/08/2025 01:24:54 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2025-08 Cumulative Update Preview for Windows 11 Version 24H2 for x64-based Systems (KB5064081) (26100.5074) Information 31/08/2025 01:24:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 01:24:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 01:24:41 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 31/08/2025 01:24:39 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 31/08/2025 01:24:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/44a72ae1-67bb-43ce-ad60-54d19908fbe3/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000002. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7e351b09-ffa6-42d6-b8f4-ad28272ad425/) from URL group (0xFE00000420000001). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/12d01a14-e09e-445e-a377-1b7459ae2c0f/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000520000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c83c147-f546-4747-a81d-0f601516847f/) from URL group (0xFD00000520000001). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7e351b09-ffa6-42d6-b8f4-ad28272ad425/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:30 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:30 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/107aa76b-b061-4f1f-8e04-1e0bae69e555/) from URL group (0xFE00000320000001). Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 31/08/2025 01:24:28 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:24:28 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c83c147-f546-4747-a81d-0f601516847f/) to URL group (0xFD00000520000001). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000520000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000520000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/3ceb3c94-73bf-4067-960b-491cc49ff235/) from URL group (0xFF00000520000001). Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/107aa76b-b061-4f1f-8e04-1e0bae69e555/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x73C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:25 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 31/08/2025 01:24:24 Service Control Manager 7040 None The start type of the BITS service was changed from demand start to auto start. Warning 31/08/2025 01:24:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:24:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3ceb3c94-73bf-4067-960b-491cc49ff235/) to URL group (0xFF00000520000001). Status: 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000520000001. Status 0x0. Process Id 0xD88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:24:14 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 01:24:14 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 01:24:14 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 01:24:14 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:14 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:13 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 01:24:13 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 01:24:13 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 01:24:13 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 01:24:13 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 01:24:13 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 01:24:12 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 01:24:12 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 01:24:12 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 01:24:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 01:24:05 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 01:24:05 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-10b2e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 01:24:05 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:24:04 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:04 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:04 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 01:24:03 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:03 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:03 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:03 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:24:02 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T00:24:02.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T00:24:02.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 01:24:02 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T00:24:02.500000000Z. Information 31/08/2025 01:23:12 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T00:23:12.177371700Z. Information 31/08/2025 01:23:11 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 01:23:11 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 01:23:06 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0xCA4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:23:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/8e2f00f7-5aac-4f93-aed0-12aaa21a427f/) from URL group (0xFE00000320000001). Process Id 0xCA4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:23:06 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:23:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/a648b763-78d8-430f-af3b-f26c2c722294/) from URL group (0xFE00000620000001). Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:24:14 EventLog 6013 None The system uptime is 11 seconds. Information 31/08/2025 01:24:14 EventLog 6005 None The Event log service was started. Information 31/08/2025 01:24:14 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 01:23:06 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 01:23:06 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 01:23:06 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 01:23:06 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 01:23:06 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 01:23:06 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 01:23:06 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 01:22:59 User32 1074 None "The process C:\WINDOWS\servicing\TrustedInstaller.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: " Information 31/08/2025 01:22:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 01:22:46 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 31/08/2025 01:22:45 Service Control Manager 7023 None "The Update Orchestrator Service service terminated with the following error: %%2149884192" Information 31/08/2025 01:22:25 Microsoft-Windows-WinREAgent 4501 None Servicing succeeded. The Windows Recovery Environment version is now: 10.0.26100.5059 Information 31/08/2025 01:22:21 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-10b2e8000000} (\Device\HarddiskVolume6) is healthy. No action is needed. Information 31/08/2025 01:21:32 Virtual Disk Service 3 None Service started. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:10246/MDEServer/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:10243/WMPNSSv4/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:10245/WMPNSSv4/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:32 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully added. Information 31/08/2025 01:21:32 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:31 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:3387/rdp/ was successfully added. Information 31/08/2025 01:21:31 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:31 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0xA68 Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.5074_none_a5532eb7772ad4c4\TiWorker.exe, User SYSTEM Information 31/08/2025 01:21:31 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:3392/rdp/ was successfully added. Error 31/08/2025 01:21:31 Microsoft-Windows-Eventlog 30 Service startup The event logging service encountered an error (5) while enabling publisher {8e889f0c-7d54-52b3-e4ae-2c8b27a482c2} to channel Microsoft-Windows-LocationServiceProvider/Operational. This does not affect channel operation, but does affect the ability of the publisher to raise events to the channel. One common reason for this error is that the Provider is using ETW Provider Security and has not granted enable permissions to the Event Log service identity. Information 31/08/2025 01:21:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.15.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.5074.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.234.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.54792954.Filons_1000.26100.5074.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.561.2259.100_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.5074_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:21:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 31/08/2025 01:20:58 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 31/08/2025 01:20:58 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 31/08/2025 01:20:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:3387/rdp/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:3392/rdp/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:10243/WMPNSSv4/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:10245/WMPNSSv4/ was successfully deleted. Information 31/08/2025 01:20:51 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:10246/MDEServer/ was successfully deleted. Information 31/08/2025 01:20:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/a648b763-78d8-430f-af3b-f26c2c722294/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFB00000320000001. Status 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1fc3dcbb-9df0-46eb-ad5a-e27b465055db/) from URL group (0xFB00000320000001). Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:49 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WSDScan for Device Instance ID SWD\DAFWSDPROVIDER\URN:UUID:01A79E01-B597-3173-A5F5-4B31AF00385D/URI:SCANNER1 with the following status: 0. Information 31/08/2025 01:20:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1fc3dcbb-9df0-46eb-ad5a-e27b465055db/) to URL group (0xFB00000320000001). Status: 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:48 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFB00000320000001. Status 0x0. Process Id 0x6E8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8e2f00f7-5aac-4f93-aed0-12aaa21a427f/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xCA4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:20:48 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xCA4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 31/08/2025 01:20:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:20:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 01:20:41 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 31/08/2025 01:20:35 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 31/08/2025 01:20:30 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 31/08/2025 01:20:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 01:20:30 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 31/08/2025 01:20:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎1975‎-‎03‎-‎16T04:53:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) unloaded successfully. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2089‎-‎09‎-‎03T22:25:34.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2080‎-‎03‎-‎25T12:27:53.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2017‎-‎09‎-‎25T03:02:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:28 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 31/08/2025 01:20:28 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 31/08/2025 01:20:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 31/08/2025 01:20:28 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 31/08/2025 01:20:28 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 31/08/2025 01:20:28 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 31/08/2025 01:20:28 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 31/08/2025 01:20:28 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 31/08/2025 01:20:28 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 31/08/2025 01:20:23 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 01:20:20 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 31/08/2025 01:20:20 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 31/08/2025 01:20:20 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 31/08/2025 01:20:20 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 31/08/2025 01:20:20 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2047‎-‎11‎-‎05T23:42:35.000000000Z) has successfully loaded and registered with Filter Manager. Warning 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:19 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:19 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 31/08/2025 01:20:18 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:18 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2089‎-‎07‎-‎15T03:58:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:18 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 31/08/2025 01:20:17 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎31T00:20:17.500000000Z. Loader time: ‎2025‎-‎08‎-‎31T00:20:16.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 31/08/2025 01:20:17 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎31T00:20:17.500000000Z. Information 31/08/2025 01:19:26 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎31T00:19:26.203204500Z. Information 31/08/2025 01:19:24 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 31/08/2025 01:19:23 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 31/08/2025 01:19:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000002. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:19:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2f216206-bb8f-4f23-bd5b-cab6bf95f2da/) from URL group (0xFE00000420000002). Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 31/08/2025 01:19:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:19:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2ec55b3e-30ff-407e-9487-20e7b3508966/) from URL group (0xFE00000020000003). Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 31/08/2025 01:20:30 EventLog 6013 None The system uptime is 12 seconds. Information 31/08/2025 01:20:30 EventLog 6005 None The Event log service was started. Information 31/08/2025 01:20:30 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 31/08/2025 01:19:18 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 01:19:18 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 31/08/2025 01:19:18 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 31/08/2025 01:19:18 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 31/08/2025 01:19:18 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 31/08/2025 01:19:18 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 31/08/2025 01:19:18 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎31T00:19:18.805319700Z from ‎2025‎-‎08‎-‎31T00:19:18.804293300Z. Time Delta: 1 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20052). RTC time: ‎2025‎-‎08‎-‎31T01:19:18.805319700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 31/08/2025 01:19:18 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 31/08/2025 01:19:18 EventLog 6006 None The Event log service was stopped. Information 31/08/2025 01:17:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 01:15:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 01:09:41 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 31/08/2025 01:09:33 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 31/08/2025 01:09:28 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5015 milliseconds. Information 31/08/2025 01:09:19 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 31/08/2025 00:59:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 31/08/2025 00:57:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 31/08/2025 00:48:35 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 31/08/2025 00:02:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e59fd33af7a9be35_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 00:02:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 31/08/2025 00:02:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 5 keys and creating 1 modified pages. Information 30/08/2025 23:58:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 30/08/2025 23:49:52 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 30/08/2025 23:37:00 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 3084. Information 30/08/2025 23:35:17 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 23:33:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2ec55b3e-30ff-407e-9487-20e7b3508966/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 23:33:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 23:33:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2f216206-bb8f-4f23-bd5b-cab6bf95f2da/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 23:33:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000002. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 30/08/2025 23:23:33 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name p02.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3068. Warning 30/08/2025 23:23:29 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 11000. Warning 30/08/2025 23:23:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name app.livedrive.com timed out after none of the configured DNS servers responded. Client PID 7848. Warning 30/08/2025 23:23:18 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 11000. Information 30/08/2025 23:23:12 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 23:23:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/337371a9-32db-4830-a620-76c228c17686/) from URL group (0xFE00000420000001). Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 23:23:12 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 23:23:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5e4db9fe-37a1-4411-9538-6a62a49dfffd/) from URL group (0xFE00000720000001). Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 23:23:11 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ssl.gstatic.com timed out after none of the configured DNS servers responded. Client PID 18140. Warning 30/08/2025 23:22:34 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name play.google.com timed out after none of the configured DNS servers responded. Client PID 18140. Information 30/08/2025 23:15:24 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SOFTWARE (TM: {e26c17eb-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c17ea-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:15:24 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SOFTWARE was reorganized with a starting size of 133148672 bytes and an ending size of 132595712 bytes. Information 30/08/2025 23:15:20 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\DRIVERS (TM: {e26c17de-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c17dd-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:15:20 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\DRIVERS was reorganized with a starting size of 7745536 bytes and an ending size of 5677056 bytes. Information 30/08/2025 23:15:19 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SYSTEM (TM: {e26c17db-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c17da-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:15:19 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 74006528 bytes and an ending size of 73752576 bytes. Information 30/08/2025 23:04:20 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\WINDOWS\System32\config\SOFTWARE (TM: {e26c1742-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c1741-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:04:19 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\WINDOWS\System32\config\DRIVERS (TM: {e26c173f-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c173e-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:04:19 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\WINDOWS\System32\config\SYSTEM (TM: {e26c173c-85e0-11f0-9d6d-941e2deed2b6}, RM: {e26c173b-85e0-11f0-9d6d-941e2deed2b6}) finished with result=0xC00000A2 (Internal code=7). Information 30/08/2025 23:02:47 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 30/08/2025 22:58:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 22:56:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 30/08/2025 22:54:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 22:49:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎30T21:49:32.002178200Z from ‎2025‎-‎08‎-‎30T21:49:32.001636000Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20052). RTC time: ‎2025‎-‎08‎-‎30T22:49:32.002178200Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 30/08/2025 22:49:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 30/08/2025 22:49:32 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 30/08/2025 22:49:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎30T21:49:32.000449400Z from ‎2025‎-‎08‎-‎30T21:49:28.088268000Z. Time Delta: 3912 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20052). RTC time: ‎2025‎-‎08‎-‎30T22:49:32.000449400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 30/08/2025 22:49:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 30/08/2025 22:49:28 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 30/08/2025 22:49:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 22:49:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 22:46:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 22:46:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 22:46:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 22:46:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 22:46:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 30/08/2025 22:45:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 22:39:31 Virtual Disk Service 4 None Service stopped. Information 30/08/2025 22:29:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 22:20:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\system32\smi\store\Machine\schema.dat was cleared updating 120 keys and creating 25 modified pages. Information 30/08/2025 22:20:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Users\Default\ntuser.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 22:20:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\DEFAULT was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 22:20:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\DRIVERS was cleared updating 341 keys and creating 36 modified pages. Information 30/08/2025 22:20:26 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\COMPONENTS was reorganized with a starting size of 8986624 bytes and an ending size of 7077888 bytes. Information 30/08/2025 22:20:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SAM was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 22:20:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SECURITY was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 22:20:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SYSTEM was cleared updating 22150 keys and creating 1543 modified pages. Information 30/08/2025 22:20:19 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\$WinREAgent\Scratch\Mount\Windows\system32\config\SOFTWARE was reorganized with a starting size of 11554816 bytes and an ending size of 11489280 bytes. Information 30/08/2025 22:19:56 Microsoft-Windows-FilterManager 6 None File System Filter 'WIMMount' (10.0, ‎2097‎-‎11‎-‎16T18:39:24.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 22:19:54 Microsoft-Windows-WinREAgent 4500 None Starting Windows Recovery Environment servicing. Information 30/08/2025 22:19:53 Virtual Disk Service 3 None Service started. Information 30/08/2025 22:19:33 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2025-08 Cumulative Update Preview for Windows 11 Version 24H2 for x64-based Systems (KB5064081) (26100.5074) Information 30/08/2025 22:19:14 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 30/08/2025 22:19:12 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 30/08/2025 22:19:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 30/08/2025 22:19:00 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 30/08/2025 22:18:59 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2025-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2 for x64 (KB5064401) Information 30/08/2025 22:12:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 22:01:12 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Warning 30/08/2025 21:57:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name signaler-pa.clients6.google.com timed out after none of the configured DNS servers responded. Client PID 18140. Warning 30/08/2025 21:57:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name www.msftconnecttest.com timed out after none of the configured DNS servers responded. Client PID 2020. Warning 30/08/2025 21:57:01 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name play.google.com timed out after none of the configured DNS servers responded. Client PID 18140. Information 30/08/2025 21:55:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 30/08/2025 21:54:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name w3-reporting.reddit.com timed out after none of the configured DNS servers responded. Client PID 18140. Information 30/08/2025 21:53:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 21:52:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000620000006). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 21:52:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:51:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000620000006). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:51:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000003). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:51:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:51:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000002). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:49:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:49:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000420000001). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:49:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000420000001). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:49:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000620000005). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 21:48:51 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 21:48:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 21:48:51 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 21:48:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:48:10 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000620000005). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:48:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:48:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x153C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:48:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 21:45:15 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 21:45:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:44:01 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek RTOTS640 NT Driver Service File Name: \SystemRoot\System32\drivers\rtots640x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 30/08/2025 21:42:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5e4db9fe-37a1-4411-9538-6a62a49dfffd/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:42:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:42:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/337371a9-32db-4830-a620-76c228c17686/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:42:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:41:59 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_35512c92865e87de\rt25cx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Warning 30/08/2025 21:41:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:40:06 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:40:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d008dd75-9e78-4cc7-8c5c-ed0168b57d12/) from URL group (0xFE00000120000001). Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:40:06 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:40:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bcf3928b-def7-4b88-bdb8-4d52afb6d150/) from URL group (0xFC00000120000001). Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:39:51 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 30/08/2025 21:38:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 30/08/2025 21:38:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 21:38:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:38:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 30/08/2025 21:37:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:36:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Warning 30/08/2025 21:36:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 21:36:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 21:35:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bcf3928b-def7-4b88-bdb8-4d52afb6d150/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:35:58 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0xEBC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:35:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d008dd75-9e78-4cc7-8c5c-ed0168b57d12/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:35:58 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x818 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:35:58 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 30/08/2025 21:35:53 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 21:35:52 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 21:35:48 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 30/08/2025 21:35:48 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 21:35:48 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 30/08/2025 21:35:48 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:47 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:46 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 30/08/2025 21:35:46 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 30/08/2025 21:35:46 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 30/08/2025 21:35:46 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 30/08/2025 21:35:46 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 30/08/2025 21:35:46 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 30/08/2025 21:35:46 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 30/08/2025 21:35:46 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 30/08/2025 21:35:46 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 30/08/2025 21:35:43 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 30/08/2025 21:35:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 30/08/2025 21:35:39 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 30/08/2025 21:35:39 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 30/08/2025 21:35:39 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 30/08/2025 21:35:39 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:39 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:38 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:38 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 30/08/2025 21:35:37 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:37 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:37 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:37 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 21:35:36 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 30/08/2025 21:35:48 EventLog 6013 None The system uptime is 11 seconds. Information 30/08/2025 21:35:48 EventLog 6005 None The Event log service was started. Information 30/08/2025 21:35:48 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 30/08/2025 21:35:48 EventLog 6008 None The previous system shutdown at 9:14:04 PM on ‎8/‎30/‎2025 was unexpected. Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎30T20:35:36.500000000Z. Loader time: ‎2025‎-‎08‎-‎30T20:35:36.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 30/08/2025 21:35:36 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎30T20:35:36.500000000Z. Information 30/08/2025 21:33:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 21:33:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 21:30:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:30:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/345ef64a-bf98-4a43-8925-d91a1ca565e1/) from URL group (0xFE00000020000003). Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:30:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000004. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:30:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/90cf5b2c-fb02-4247-91a9-1b559f7fe9a7/) from URL group (0xFE00000720000004). Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:27:51 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 21:26:47 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy18) is healthy. No action is needed. Information 30/08/2025 21:26:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/345ef64a-bf98-4a43-8925-d91a1ca565e1/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:26:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:26:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/90cf5b2c-fb02-4247-91a9-1b559f7fe9a7/) to URL group (0xFE00000720000004). Status: 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:26:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000004. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 30/08/2025 21:26:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4232. Warning 30/08/2025 21:26:16 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 7548. Warning 30/08/2025 21:26:16 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9428. Warning 30/08/2025 21:26:07 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 7548. Warning 30/08/2025 21:25:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9428. Warning 30/08/2025 21:25:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name bolt.dropbox.com timed out after none of the configured DNS servers responded. Client PID 12512. Information 30/08/2025 21:25:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000003. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:25:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/acc26ee5-d727-4a72-a9b6-efeb2d2de9f0/) from URL group (0xFE00000720000003). Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 30/08/2025 21:25:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s08.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4232. Information 30/08/2025 21:25:35 Virtual Disk Service 4 None Service stopped. Warning 30/08/2025 21:25:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 7548. Information 30/08/2025 21:25:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/acc26ee5-d727-4a72-a9b6-efeb2d2de9f0/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:25:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000003. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 30/08/2025 21:25:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name fe3cr.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 3244. Information 30/08/2025 21:25:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000002. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:25:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 21:25:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5c1c0118-17cf-4892-88b4-984aa907d53e/) from URL group (0xFE00000720000002). Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 21:25:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6f4aa4a9-a7f8-4a9e-8c3f-1a6343a53ad1/) from URL group (0xFE00000320000001). Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 21:25:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9428. Information 30/08/2025 21:24:53 Service Control Manager 7045 None "A service was installed in the system. Service Name: cpuz158 Service File Name: C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 30/08/2025 21:24:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 30/08/2025 21:24:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\9ad8f1e5e5d5adfb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 21:24:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 1 modified pages. Information 30/08/2025 21:24:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 6 keys and creating 1 modified pages. Warning 30/08/2025 21:14:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 21:14:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 21:13:32 Virtual Disk Service 3 None Service started. Information 30/08/2025 21:13:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 21:13:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Information 30/08/2025 21:10:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 21:06:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 21:04:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 21:03:19 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 30/08/2025 21:03:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Information 30/08/2025 21:03:09 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 30/08/2025 21:02:35 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 30/08/2025 21:02:35 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 30/08/2025 21:01:40 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 30/08/2025 21:01:40 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 30/08/2025 20:56:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 20:54:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 20:53:43 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 20:51:33 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 30/08/2025 20:51:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 20:51:31 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Error 30/08/2025 20:51:25 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. Information 30/08/2025 20:51:24 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 30/08/2025 20:51:23 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 30/08/2025 20:51:22 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime Information 30/08/2025 20:51:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 20:51:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2534.2.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 30/08/2025 20:51:02 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime Information 30/08/2025 20:51:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:50:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 30/08/2025 20:50:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 30/08/2025 20:50:53 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:50:28 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:50:28 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:50:28 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:50:15 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 30/08/2025 20:47:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 20:45:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 20:44:29 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:44:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Warning 30/08/2025 20:44:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 20:43:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 20:42:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:42:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 20:41:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 32 keys and creating 4 modified pages. Information 30/08/2025 20:41:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 30/08/2025 20:41:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 20:41:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 20:41:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 4 keys and creating 1 modified pages. Information 30/08/2025 20:41:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 11 keys and creating 2 modified pages. Information 30/08/2025 20:40:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000004). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000007). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000007). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000003). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000003). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:40:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000005). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 20:40:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 20:39:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:39:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:39:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:39:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000001). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:39:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 30/08/2025 20:39:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 30/08/2025 20:38:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:38:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:38:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:38:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 20:38:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:38:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 30/08/2025 20:37:44 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 30/08/2025 20:37:44 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 30/08/2025 20:36:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 20:36:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 20:36:23 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 20:36:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000006). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000006). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000005). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:36:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000003). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000002). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:35:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1700 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 30/08/2025 20:35:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 20:35:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 30/08/2025 20:34:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 19 keys and creating 4 modified pages. Information 30/08/2025 20:34:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 10 modified pages. Information 30/08/2025 20:34:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 30/08/2025 20:34:39 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 30/08/2025 20:34:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 20:34:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 30/08/2025 20:34:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6f4aa4a9-a7f8-4a9e-8c3f-1a6343a53ad1/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5c1c0118-17cf-4892-88b4-984aa907d53e/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000002. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/18a3483e-ffb7-47bc-98ea-513fc1515467/) from URL group (0xFE00000720000001). Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/69cf2070-2f6c-4239-b3dc-159a583a4608/) from URL group (0xFE00000020000001). Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 30/08/2025 20:34:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 3 modified pages. Information 30/08/2025 20:34:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 17 keys and creating 1 modified pages. Information 30/08/2025 20:34:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 36 keys and creating 7 modified pages. Information 30/08/2025 20:34:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/69cf2070-2f6c-4239-b3dc-159a583a4608/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f3cf15ef-c075-440e-903e-4bc77ff5b884/) from URL group (0xFE00000120000001). Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:20 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/18a3483e-ffb7-47bc-98ea-513fc1515467/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/3eeece15-59ba-41b6-9f0c-d396b6063be4/) from URL group (0xFE00000420000001). Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f3cf15ef-c075-440e-903e-4bc77ff5b884/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x434 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 20:34:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\87b68362b9c83648_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 30/08/2025 20:34:16 Service Control Manager 7040 None The start type of the BITS service was changed from demand start to auto start. Warning 30/08/2025 20:34:10 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 20:34:08 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was reorganized with a starting size of 6684672 bytes and an ending size of 6668288 bytes. Information 30/08/2025 20:34:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\ntuser.dat was cleared updating 10383 keys and creating 1117 modified pages. Information 30/08/2025 20:34:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 30/08/2025 20:34:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3eeece15-59ba-41b6-9f0c-d396b6063be4/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:07 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0xE60 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 20:34:05 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 7745536 bytes and an ending size of 6512640 bytes. Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 20:34:04 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 30/08/2025 20:34:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 20:34:04 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 30/08/2025 20:34:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:04 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:34:03 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 30/08/2025 20:34:03 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 30/08/2025 20:34:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 30/08/2025 20:34:03 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 30/08/2025 20:34:03 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 30/08/2025 20:34:03 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 30/08/2025 20:34:03 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 30/08/2025 20:34:03 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 30/08/2025 20:34:03 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 30/08/2025 20:33:58 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 30/08/2025 20:33:55 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 30/08/2025 20:33:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 30/08/2025 20:33:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 20:33:54 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:54 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:53 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 30/08/2025 20:33:53 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:53 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:53 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 20:33:52 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎30T19:33:52.500000000Z. Loader time: ‎2025‎-‎08‎-‎30T19:33:52.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 30/08/2025 20:33:52 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎30T19:33:52.500000000Z. Information 30/08/2025 13:46:51 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎30T12:46:51.252119900Z. Information 30/08/2025 13:46:50 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 30/08/2025 13:46:49 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Off Event Code: 0x0 Reason: Kernel API" Information 30/08/2025 20:34:04 EventLog 6013 None The system uptime is 12 seconds. Information 30/08/2025 20:34:04 EventLog 6005 None The Event log service was started. Information 30/08/2025 20:34:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 30/08/2025 13:46:44 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 30/08/2025 13:46:44 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 30/08/2025 13:46:44 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 30/08/2025 13:46:44 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 30/08/2025 13:46:44 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 30/08/2025 13:46:44 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 30/08/2025 13:46:44 EventLog 6006 None The Event log service was stopped. Error 30/08/2025 13:46:39 Microsoft-Windows-DistributedCOM 10005 None "DCOM got error ""1115"" attempting to start the service UsoSvc with arguments ""Unavailable"" in order to run the server: {9C695035-48D2-4229-8B73-4C70E756E519}" Information 30/08/2025 13:46:38 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 30/08/2025 13:46:37 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5141 milliseconds. Warning 30/08/2025 13:46:37 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5125 milliseconds. Error 30/08/2025 13:46:36 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Information 30/08/2025 13:46:34 Application Popup 26 None Application popup: idle_report.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application. Information 30/08/2025 13:46:31 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Warning 30/08/2025 13:46:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 13:45:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 13:44:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 30/08/2025 13:43:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 30/08/2025 13:43:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 30/08/2025 13:43:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 30/08/2025 13:43:32 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 30/08/2025 13:43:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 30/08/2025 13:42:01 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Warning 30/08/2025 13:41:53 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 13:41:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3d7cbd52-0f2e-4fd4-aece-e30f5adfd308/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000320000001. Status 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e78170e5-cecf-4c54-89c5-40d0d3be7b02/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/afe916c2-784a-425e-8a49-7e2b7431548a/) from URL group (0xFE00000020000001). Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000020000001. Status 0x0. Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bbda2d1c-abf1-43a0-8af8-6f86d3c41b12/) from URL group (0xFD00000020000001). Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bbda2d1c-abf1-43a0-8af8-6f86d3c41b12/) to URL group (0xFD00000020000001). Status: 0x0. Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000020000001. Status 0x0. Process Id 0xE58 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/afe916c2-784a-425e-8a49-7e2b7431548a/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e31f4ec1-07ca-4dd6-b573-e3a562f9ea34/) from URL group (0xFE00000120000001). Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:30 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 30/08/2025 13:41:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 13:41:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 30/08/2025 13:41:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e31f4ec1-07ca-4dd6-b573-e3a562f9ea34/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x44C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 30/08/2025 13:41:20 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 30/08/2025 13:41:20 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 13:41:20 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 30/08/2025 13:41:20 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:20 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:19 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 30/08/2025 13:41:19 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 30/08/2025 13:41:19 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 30/08/2025 13:41:19 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 30/08/2025 13:41:19 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 30/08/2025 13:41:19 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 30/08/2025 13:41:19 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 30/08/2025 13:41:19 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 30/08/2025 13:41:19 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 30/08/2025 13:41:14 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 30/08/2025 13:41:11 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 30/08/2025 13:41:11 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 30/08/2025 13:41:11 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 30/08/2025 13:41:10 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:10 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:09 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 30/08/2025 13:41:09 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:09 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:09 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 30/08/2025 13:41:08 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎30T12:41:08.500000000Z. Loader time: ‎2025‎-‎08‎-‎30T12:41:07.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 30/08/2025 13:41:08 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎30T12:41:08.500000000Z. Information 29/08/2025 20:14:06 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎29T19:14:06.678575300Z. Information 29/08/2025 20:14:06 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 29/08/2025 20:14:04 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Off Event Code: 0x0 Reason: Kernel API" Information 30/08/2025 13:41:20 EventLog 6013 None The system uptime is 12 seconds. Information 30/08/2025 13:41:20 EventLog 6005 None The Event log service was started. Information 30/08/2025 13:41:20 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 29/08/2025 20:13:59 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 29/08/2025 20:13:59 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 29/08/2025 20:13:59 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 29/08/2025 20:13:59 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 29/08/2025 20:13:59 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 29/08/2025 20:13:59 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 29/08/2025 20:13:59 EventLog 6006 None The Event log service was stopped. Information 29/08/2025 20:13:53 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 29/08/2025 20:13:52 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5015 milliseconds. Information 29/08/2025 20:13:46 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 29/08/2025 20:12:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 29/08/2025 20:12:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 20:12:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 20:12:39 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 29/08/2025 20:12:39 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 29/08/2025 20:11:30 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Warning 29/08/2025 20:11:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 20:10:54 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e8e31e29-2070-4da6-8211-34e81be1a63e/) to URL group (0xFF00000220000002). Status: 0x0. Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000002. Status 0x0. Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/83ec905c-905f-4005-9e66-c3cec3234948/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/8ddad9f2-504c-452e-8523-0750f7c71c16/) from URL group (0xFE00000220000001). Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b1845229-95fe-436f-ba87-2537745a9e5f/) from URL group (0xFE00000720000001). Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 29/08/2025 20:10:36 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 29/08/2025 20:10:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8ddad9f2-504c-452e-8523-0750f7c71c16/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x744 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 20:10:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b1845229-95fe-436f-ba87-2537745a9e5f/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xE88 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:33 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was reorganized with a starting size of 6311936 bytes and an ending size of 4984832 bytes. Warning 29/08/2025 20:10:27 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 29/08/2025 20:10:26 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 29/08/2025 20:10:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat was cleared updating 34 keys and creating 6 modified pages. Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:23 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 29/08/2025 20:10:22 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 29/08/2025 20:10:22 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 29/08/2025 20:10:22 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 29/08/2025 20:10:22 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 29/08/2025 20:10:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 300 keys and creating 72 modified pages. Information 29/08/2025 20:10:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 224 keys and creating 20 modified pages. Information 29/08/2025 20:10:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 236 keys and creating 20 modified pages. Information 29/08/2025 20:10:21 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 29/08/2025 20:10:21 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 29/08/2025 20:10:21 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 29/08/2025 20:10:21 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 29/08/2025 20:10:21 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 29/08/2025 20:10:21 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 29/08/2025 20:10:21 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 29/08/2025 20:10:21 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 29/08/2025 20:10:21 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 29/08/2025 20:10:16 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 29/08/2025 20:10:13 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 29/08/2025 20:10:13 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 133320704 bytes and an ending size of 132501504 bytes. Information 29/08/2025 20:10:10 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 29/08/2025 20:10:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 29/08/2025 20:10:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 916 keys and creating 141 modified pages. Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 71 keys and creating 9 modified pages. Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 89 keys and creating 5 modified pages. Information 29/08/2025 20:10:10 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:09 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:09 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 29/08/2025 20:10:08 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:08 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:08 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 20:10:08 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎29T19:10:07.500000000Z. Loader time: ‎2025‎-‎08‎-‎29T19:10:06.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 29/08/2025 20:10:08 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎29T19:10:07.500000000Z. Information 29/08/2025 14:07:41 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎29T13:07:41.109200700Z. Information 29/08/2025 14:07:40 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 29/08/2025 14:07:37 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Event Code: 0x0 Reason: Kernel API" Information 29/08/2025 14:07:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000006. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 14:07:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ee122fb5-777d-4544-8369-309779cab56d/) from URL group (0xFE00000120000006). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 14:07:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000004. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 14:07:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/79dc115d-ecf2-423d-857d-86eedb3e0714/) from URL group (0xFE00000220000004). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 20:10:22 EventLog 6013 None The system uptime is 15 seconds. Information 29/08/2025 20:10:22 EventLog 6005 None The Event log service was started. Information 29/08/2025 20:10:22 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 29/08/2025 14:07:32 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 29/08/2025 14:07:32 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 29/08/2025 14:07:32 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 29/08/2025 14:07:32 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 29/08/2025 14:07:32 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 29/08/2025 14:07:32 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 29/08/2025 14:07:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎29T13:07:32.615069800Z from ‎2025‎-‎08‎-‎29T13:07:32.613102100Z. Time Delta: 1 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4080). RTC time: ‎2025‎-‎08‎-‎29T14:07:32.615069800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 29/08/2025 14:07:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 29/08/2025 14:07:32 EventLog 6006 None The Event log service was stopped. Information 29/08/2025 14:07:28 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 29/08/2025 14:07:26 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 7547 milliseconds. Warning 29/08/2025 14:07:18 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 10062 milliseconds. Warning 29/08/2025 14:07:15 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 7031 milliseconds. Warning 29/08/2025 14:02:44 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name play.google.com timed out after none of the configured DNS servers responded. Client PID 18608. Information 29/08/2025 14:01:36 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 29/08/2025 14:01:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 29/08/2025 13:59:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 29/08/2025 13:58:51 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 29/08/2025 13:56:33 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 29/08/2025 13:56:14 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 29/08/2025 13:56:12 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 29/08/2025 13:56:11 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 29/08/2025 13:55:43 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 29/08/2025 13:55:43 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 29/08/2025 13:55:43 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 29/08/2025 13:55:29 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 29/08/2025 13:55:24 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 29/08/2025 13:54:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 29/08/2025 13:46:05 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 29/08/2025 13:44:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 29/08/2025 13:39:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 13:34:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 29/08/2025 13:34:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.Paint_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\b9c273474f0539c8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 29/08/2025 13:34:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 19 keys and creating 3 modified pages. Information 29/08/2025 13:34:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 29 keys and creating 4 modified pages. Warning 29/08/2025 13:31:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 13:28:51 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 13:28:51 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 29/08/2025 13:28:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 13:28:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 13:26:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 13:26:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 13:26:54 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 29/08/2025 13:26:51 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎29T10:27:03.720094100Z Wake Time: ‎2025‎-‎08‎-‎29T12:26:50.500560500Z Wake Source: Unknown" Information 29/08/2025 13:26:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 167" Information 29/08/2025 13:26:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ee122fb5-777d-4544-8369-309779cab56d/) to URL group (0xFE00000120000006). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 13:26:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000006. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 13:26:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000002. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 13:26:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ee122fb5-777d-4544-8369-309779cab56d/) from URL group (0xFE00000620000002). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 13:26:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 29/08/2025 13:26:50 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 167" Information 29/08/2025 13:26:50 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 29/08/2025 13:26:50 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 29/08/2025 13:26:50 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 29/08/2025 13:26:50 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 29/08/2025 13:26:47 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎29T12:26:47.500000000Z from ‎2025‎-‎08‎-‎29T10:27:06.230638100Z. Time Delta: 7181269 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎29T13:26:47.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 29/08/2025 11:27:06 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 29/08/2025 13:26:47 EventLog 6013 None The system uptime is 144091 seconds. Information 29/08/2025 11:27:03 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 29/08/2025 11:27:03 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 167" Information 29/08/2025 11:27:03 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 29/08/2025 11:27:03 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 29/08/2025 11:27:02 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Warning 29/08/2025 11:26:57 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5032 milliseconds. Warning 29/08/2025 11:26:52 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5032 milliseconds. Information 29/08/2025 11:25:04 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int ip reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:24:56 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:24:49 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int tcp set global rss=enabled C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:24:42 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int tcp set global autotuninglevel=disabled C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:24:35 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh int tcp set heuristics disabled C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:23:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ee122fb5-777d-4544-8369-309779cab56d/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:23:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000002. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:23:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/79dc115d-ecf2-423d-857d-86eedb3e0714/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 11:23:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000004. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 11:22:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000020000005. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:22:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/99e8b5e2-aeec-48b1-b222-e7f3077f7ffe/) from URL group (0xFF00000020000005). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:22:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000002. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 11:22:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0e0ee40c-78cf-463d-aff8-5419d79a81fd/) from URL group (0xFE00000520000002). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 29/08/2025 11:21:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Error 29/08/2025 11:21:55 Service Control Manager 7024 None "The DropboxUpdater Service 123.0.6299.129 (DropboxUpdaterService123.0.6299.129) service terminated with the following service-specific error: %%45" Information 29/08/2025 11:21:23 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 29/08/2025 11:20:34 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 29/08/2025 11:20:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 11:20:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 29/08/2025 11:19:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 29/08/2025 11:18:17 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 29/08/2025 11:18:14 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" enable=yes profile=Any protocol=udp localport=17500 C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:18:14 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" enable=yes profile=Any protocol=tcp localport=17500-17510 C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:18:13 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall delete rule name=Dropbox ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping26804_766369259\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Information 29/08/2025 11:16:51 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 29/08/2025 11:16:51 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 29/08/2025 11:16:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/99e8b5e2-aeec-48b1-b222-e7f3077f7ffe/) to URL group (0xFF00000020000005). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:16:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000020000005. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 11:16:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0e0ee40c-78cf-463d-aff8-5419d79a81fd/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 11:16:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000002. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 11:15:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 29/08/2025 11:14:35 Service Control Manager 7040 None The start type of the Realtek 8168 NT Driver service was changed from disabled to demand start. Information 29/08/2025 11:14:14 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 29/08/2025 11:04:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_d9ma7nkbkv4rp\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\47b86fda953346a8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 29/08/2025 11:03:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 11:03:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 11:03:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Warning 29/08/2025 11:02:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 11:02:34 Service Control Manager 7040 None The start type of the Realtek 8168 NT Driver service was changed from demand start to disabled. Warning 29/08/2025 11:02:24 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name p01.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:02:19 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:02:18 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name beacons4.gvt2.com timed out after none of the configured DNS servers responded. Client PID 20688. Warning 29/08/2025 11:02:13 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:02:07 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:02:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:01:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:01:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name app.livedrive.com timed out after none of the configured DNS servers responded. Client PID 16744. Warning 29/08/2025 11:01:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:01:51 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-info-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:01:46 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s13.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:01:46 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 11:01:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name app.livedrive.com timed out after none of the configured DNS servers responded. Client PID 16744. Warning 29/08/2025 11:01:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ds.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:01:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name brdtest.com timed out after none of the configured DNS servers responded. Client PID 4464. Warning 29/08/2025 11:01:35 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 11:01:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name brdtest.com timed out after none of the configured DNS servers responded. Client PID 4464. Warning 29/08/2025 11:01:29 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s12.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:01:24 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 11:01:19 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:01:19 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dc1-pp.ksn.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:01:14 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:01:13 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 11:01:08 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name app.livedrive.com timed out after none of the configured DNS servers responded. Client PID 16744. Warning 29/08/2025 11:00:58 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-url-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:00:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 11:00:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-url-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:00:40 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name up.freedownloadmanager.org timed out after none of the configured DNS servers responded. Client PID 10668. Warning 29/08/2025 11:00:34 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-stat-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 11:00:23 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 11:00:01 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 3300. Warning 29/08/2025 10:59:51 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 10:59:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 10:59:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-verdict-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 10:59:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:59:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 10:59:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 10:59:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:59:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-stat-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 10:59:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name fd.api.iris.microsoft.com timed out after none of the configured DNS servers responded. Client PID 8744. Warning 29/08/2025 10:59:03 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s02.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4324. Warning 29/08/2025 10:58:58 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:58:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 10:58:53 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:58:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 10:58:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Information 29/08/2025 10:58:46 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000072000000A. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:58:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/39aefd07-1cd1-4425-b1e9-aca3d9d0bc1d/) from URL group (0xFE0000072000000A). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:58:46 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 10:58:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0645dfb3-28a4-4020-b849-b725a4a4ffbb/) from URL group (0xFE00000120000005). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 29/08/2025 10:58:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Warning 29/08/2025 10:58:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:58:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name static.nvidiagrid.net timed out after none of the configured DNS servers responded. Client PID 1536. Warning 29/08/2025 10:58:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21216. Warning 29/08/2025 10:58:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ocsp.entrust.net timed out after none of the configured DNS servers responded. Client PID 3560. Warning 29/08/2025 10:58:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17312. Information 29/08/2025 10:58:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎29T09:58:00.840911400Z from ‎2025‎-‎08‎-‎29T09:58:00.839648000Z. Time Delta: 1 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4080). RTC time: ‎2025‎-‎08‎-‎29T10:58:00.840911400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 29/08/2025 10:58:00 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 29/08/2025 10:58:00 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 29/08/2025 10:58:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎29T09:58:00.839648000Z from ‎2025‎-‎08‎-‎29T09:57:56.869404700Z. Time Delta: 3970 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4080). RTC time: ‎2025‎-‎08‎-‎29T10:58:00.839648000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 29/08/2025 10:58:00 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 29/08/2025 10:57:56 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 29/08/2025 10:57:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 10:57:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/39aefd07-1cd1-4425-b1e9-aca3d9d0bc1d/) to URL group (0xFE0000072000000A). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:57:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000072000000A. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:57:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0645dfb3-28a4-4020-b849-b725a4a4ffbb/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 10:57:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 10:57:00 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Warning 29/08/2025 10:56:56 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 29/08/2025 10:56:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 29/08/2025 10:56:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/51f858a5-501c-4df9-b31e-f65268c3ccc9/) from URL group (0xFE00000520000001). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 29/08/2025 10:56:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 29/08/2025 10:56:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 29/08/2025 10:56:18 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 29/08/2025 10:56:15 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎27T21:07:30.614770700Z Wake Time: ‎2025‎-‎08‎-‎29T09:56:14.494962300Z Wake Source: Unknown" Information 29/08/2025 10:56:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 167" Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000020000004. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFF00000020000004). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFF00000020000004). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000020000004. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000004. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFE00000120000004). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000004. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFE00000220000003). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000009. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFE00000720000009). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFE00000720000009). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000009. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFE00000120000003). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFE00000120000002). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 29/08/2025 10:56:14 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 29/08/2025 10:56:14 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 29/08/2025 10:56:14 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 167" Information 29/08/2025 10:56:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 29/08/2025 10:56:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 29/08/2025 10:56:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 29/08/2025 10:56:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 29/08/2025 10:56:11 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎29T09:56:11.500000000Z from ‎2025‎-‎08‎-‎27T21:07:33.803363000Z. Time Delta: 132517696 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎29T10:56:11.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 29/08/2025 10:56:11 EventLog 6013 None The system uptime is 135059 seconds. Information 27/08/2025 22:07:33 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 27/08/2025 22:07:30 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 27/08/2025 22:07:30 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 167" Information 27/08/2025 22:07:30 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 27/08/2025 22:07:30 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 27/08/2025 22:07:29 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5063 milliseconds. Warning 27/08/2025 22:07:29 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 27/08/2025 22:06:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 27/08/2025 22:03:34 Service Control Manager 7024 None "The DropboxUpdater Service 123.0.6299.129 (DropboxUpdaterService123.0.6299.129) service terminated with the following service-specific error: %%45" Information 27/08/2025 21:58:26 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:58:26 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 27/08/2025 21:58:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:57:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 27/08/2025 21:56:58 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience. Information 27/08/2025 21:56:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Information 27/08/2025 21:56:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_525.22301.90.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 27/08/2025 21:56:26 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad Information 27/08/2025 21:56:24 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad Information 27/08/2025 21:56:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2507.26.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 27/08/2025 21:56:20 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 27/08/2025 21:56:16 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 27/08/2025 21:56:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 27/08/2025 21:56:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2025.11070.24004.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 27/08/2025 21:56:07 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 27/08/2025 21:56:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 27/08/2025 21:56:05 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 27/08/2025 21:56:03 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 27/08/2025 21:56:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2508.51171.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Warning 27/08/2025 21:55:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:55:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 27/08/2025 21:55:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 27/08/2025 21:55:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 27/08/2025 21:54:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:54:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:54:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 27/08/2025 21:54:28 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎27T20:39:37.647527900Z Wake Time: ‎2025‎-‎08‎-‎27T20:54:27.492212800Z Wake Source: Unknown" Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 167" Information 27/08/2025 21:54:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:54:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:54:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000020000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:54:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) from URL group (0xFF00000020000003). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:54:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 167" Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 27/08/2025 21:54:27 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 27/08/2025 21:54:24 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎27T20:54:24.500000000Z from ‎2025‎-‎08‎-‎27T20:39:44.333956100Z. Time Delta: 880166 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎27T21:54:24.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 27/08/2025 21:39:44 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 27/08/2025 21:39:37 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 27/08/2025 21:39:37 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 167" Information 27/08/2025 21:39:37 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 27/08/2025 21:39:37 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 27/08/2025 21:39:34 winsrvext 100 None Process C:\Program Files (x86)\DYMO\DYMO Label Software\DLS.exe is delaying system shutdown after 5047 milliseconds. Warning 27/08/2025 21:39:34 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5046 milliseconds. Information 27/08/2025 21:39:26 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 27/08/2025 21:37:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 27/08/2025 21:37:56 Service Control Manager 7024 None "The DropboxUpdater Service 123.0.6299.129 (DropboxUpdaterService123.0.6299.129) service terminated with the following service-specific error: %%45" Warning 27/08/2025 21:37:24 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:37:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:37:24 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:37:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:35:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000008). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 27/08/2025 21:34:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:34:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000008). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:34:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000007). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:34:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000007). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:34:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000001). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000001). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000006). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000006). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000005). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000005). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000004). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:36 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000004). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000003). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:36 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:33:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:32:52 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 27/08/2025 21:32:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:31:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:31:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:31:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:31:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:30:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x17A0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 27/08/2025 21:30:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:30:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 27/08/2025 21:28:55 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Warning 27/08/2025 21:27:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:27:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 27/08/2025 21:27:43 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 27/08/2025 21:27:43 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 27/08/2025 21:27:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 27/08/2025 21:26:24 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy7) is healthy. No action is needed. Warning 27/08/2025 21:26:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 27/08/2025 21:25:52 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 27/08/2025 21:25:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/86612b69-e1f7-4366-ae4b-54c4df9a690c/) to URL group (0xFF00000020000003). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000020000003. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/51f858a5-501c-4df9-b31e-f65268c3ccc9/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d0bb49e8-657d-4a51-8d85-64068c03c6f1/) from URL group (0xFE00000120000001). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000020000002. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/59fff186-b208-469e-966f-696d8fd0a080/) from URL group (0xFF00000020000002). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d0bb49e8-657d-4a51-8d85-64068c03c6f1/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/17de37b1-784f-457d-a733-37cc097e1af2/) from URL group (0xFE00000220000001). Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:38 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/59fff186-b208-469e-966f-696d8fd0a080/) to URL group (0xFF00000020000002). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000020000002. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7d3ac859-3823-45f7-a2c5-1dfea9dfe488/) from URL group (0xFE00000020000001). Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/17de37b1-784f-457d-a733-37cc097e1af2/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:38 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:25:38 Service Control Manager 7040 None The start type of the BITS service was changed from demand start to auto start. Warning 27/08/2025 21:25:30 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 27/08/2025 21:25:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 27/08/2025 21:25:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7d3ac859-3823-45f7-a2c5-1dfea9dfe488/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0xD48 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 27/08/2025 21:25:25 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 27/08/2025 21:25:25 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 27/08/2025 21:25:25 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 27/08/2025 21:25:25 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:25 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:24 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 27/08/2025 21:25:24 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 27/08/2025 21:25:24 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 27/08/2025 21:25:24 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 27/08/2025 21:25:24 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 27/08/2025 21:25:24 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 27/08/2025 21:25:23 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 27/08/2025 21:25:23 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 27/08/2025 21:25:23 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 27/08/2025 21:25:19 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 27/08/2025 21:25:16 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 27/08/2025 21:25:16 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 27/08/2025 21:25:15 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 27/08/2025 21:25:15 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:15 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:14 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 27/08/2025 21:25:13 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:13 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:13 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 27/08/2025 21:25:12 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 27/08/2025 21:25:26 EventLog 6013 None The system uptime is 13 seconds. Information 27/08/2025 21:25:26 EventLog 6005 None The Event log service was started. Information 27/08/2025 21:25:26 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 27/08/2025 21:25:26 EventLog 6008 None The previous system shutdown at 6:24:23 PM on ‎8/‎26/‎2025 was unexpected. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎27T20:25:12.500000000Z. Loader time: ‎2025‎-‎08‎-‎27T20:25:11.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 27/08/2025 21:25:12 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎27T20:25:12.500000000Z. Information 27/08/2025 21:23:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 27/08/2025 21:23:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎27T20:23:40.823213500Z from ‎2025‎-‎08‎-‎27T20:23:40.822296300Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20792). RTC time: ‎2025‎-‎08‎-‎27T21:23:40.823213500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 27/08/2025 21:23:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 27/08/2025 21:23:40 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 27/08/2025 21:23:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎27T20:23:40.821566100Z from ‎2025‎-‎08‎-‎27T20:23:39.054965300Z. Time Delta: 1766 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20792). RTC time: ‎2025‎-‎08‎-‎27T21:23:40.821566100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 27/08/2025 21:23:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 27/08/2025 21:23:39 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 27/08/2025 21:23:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy6) is healthy. No action is needed. Information 27/08/2025 21:23:00 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 27/08/2025 21:22:58 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎26T17:36:18.625048500Z Wake Time: ‎2025‎-‎08‎-‎27T20:22:57.495866500Z Wake Source: Unknown" Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 166" Information 27/08/2025 21:22:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e04cb107-410e-48fb-aca2-d6d709ec16f0/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:22:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:22:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000320000001. Status 0x0. Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:22:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e04cb107-410e-48fb-aca2-d6d709ec16f0/) from URL group (0xFF00000320000001). Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 27/08/2025 21:22:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 166" Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 27/08/2025 21:22:57 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 27/08/2025 21:22:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎27T20:22:54.500000000Z from ‎2025‎-‎08‎-‎26T17:36:22.003930400Z. Time Delta: 96392496 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎27T21:22:54.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 18:36:22 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 27/08/2025 21:22:54 EventLog 6013 None The system uptime is 97123 seconds. Information 26/08/2025 18:36:18 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 26/08/2025 18:36:18 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 166" Information 26/08/2025 18:36:18 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 26/08/2025 18:36:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 26/08/2025 18:36:16 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 26/08/2025 18:36:16 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5032 milliseconds. Information 26/08/2025 18:36:07 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 26/08/2025 18:35:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 18:34:39 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 26/08/2025 18:30:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 18:29:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:28:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:28:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:28:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:28:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000001). Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:26:50 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 18:26:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 18:26:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 18:26:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 18:26:38 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 26/08/2025 18:26:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000001). Status: 0x0. Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:26:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:26:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x15D0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 26/08/2025 18:26:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 18:25:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 18:25:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy5) is healthy. No action is needed. Warning 26/08/2025 18:24:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 18:24:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e04cb107-410e-48fb-aca2-d6d709ec16f0/) to URL group (0xFF00000320000001). Status: 0x0. Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:24:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000320000001. Status 0x0. Process Id 0x47C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:24:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5421a522-f31a-4b63-842c-c2f3228ec449/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xE80 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:24:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xE80 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:24:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 18:24:36 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 26/08/2025 18:24:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 18:24:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:24 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 18:24:23 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 26/08/2025 18:24:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 26/08/2025 18:24:23 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 26/08/2025 18:24:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:23 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:22 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 26/08/2025 18:24:22 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 26/08/2025 18:24:22 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 26/08/2025 18:24:22 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 26/08/2025 18:24:22 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 26/08/2025 18:24:22 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 26/08/2025 18:24:21 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 26/08/2025 18:24:21 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 26/08/2025 18:24:21 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 26/08/2025 18:24:17 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 26/08/2025 18:24:14 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 26/08/2025 18:24:14 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 26/08/2025 18:24:14 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 18:24:13 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:13 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 26/08/2025 18:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 18:24:11 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎26T17:24:11.500000000Z. Loader time: ‎2025‎-‎08‎-‎26T17:24:11.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 26/08/2025 18:24:11 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎26T17:24:11.500000000Z. Information 26/08/2025 18:19:49 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎26T17:19:49.153316400Z. Information 26/08/2025 18:19:48 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 26/08/2025 18:19:48 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 26/08/2025 18:19:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000022000000C. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:19:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b73342d1-fa1c-4e50-9c7a-c9464f388f84/) from URL group (0xFF0000022000000C). Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:19:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000004. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:19:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/42046d0d-33cc-4b19-8690-f9218cee0b15/) from URL group (0xFE00000020000004). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:24:23 EventLog 6013 None The system uptime is 12 seconds. Information 26/08/2025 18:24:23 EventLog 6005 None The Event log service was started. Information 26/08/2025 18:24:23 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 26/08/2025 18:19:43 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 26/08/2025 18:19:43 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 26/08/2025 18:19:43 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 26/08/2025 18:19:43 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 26/08/2025 18:19:43 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 26/08/2025 18:19:43 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 26/08/2025 18:19:43 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎26T17:19:43.385050700Z from ‎2025‎-‎08‎-‎26T17:19:43.383202900Z. Time Delta: 1 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4656). RTC time: ‎2025‎-‎08‎-‎26T18:19:43.385050700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 18:19:43 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 26/08/2025 18:19:43 EventLog 6006 None The Event log service was stopped. Information 26/08/2025 18:19:42 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 26/08/2025 18:19:40 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Error 26/08/2025 18:19:40 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Error 26/08/2025 18:19:40 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Error 26/08/2025 18:19:40 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Warning 26/08/2025 18:19:35 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 26/08/2025 18:19:30 Microsoft-Windows-DistributedCOM 10010 None The server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} did not register with DCOM within the required timeout. Information 26/08/2025 18:18:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 26/08/2025 18:16:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 18:15:32 Service Control Manager 7045 None "A service was installed in the system. Service Name: cpuz158 Service File Name: C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 26/08/2025 18:05:54 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 26/08/2025 18:05:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎26T17:05:54.691915300Z from ‎2025‎-‎08‎-‎26T17:05:54.691480200Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4656). RTC time: ‎2025‎-‎08‎-‎26T18:05:54.691915300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 18:05:54 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 26/08/2025 18:05:54 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 26/08/2025 18:05:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎26T17:05:54.690004400Z from ‎2025‎-‎08‎-‎26T17:05:48.872774700Z. Time Delta: 5817 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 4656). RTC time: ‎2025‎-‎08‎-‎26T18:05:54.690004400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 18:05:54 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 26/08/2025 18:05:48 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 26/08/2025 18:05:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/42046d0d-33cc-4b19-8690-f9218cee0b15/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:05:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000004. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:05:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b73342d1-fa1c-4e50-9c7a-c9464f388f84/) to URL group (0xFF0000022000000C). Status: 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:05:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000022000000C. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:05:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\cdb62c5d8f4fcab0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 26/08/2025 18:04:56 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek 8168 NT Driver Service File Name: \SystemRoot\System32\drivers\Rt630x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Warning 26/08/2025 18:04:34 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 26/08/2025 18:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000320000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e37e3b1b-6ab6-46ab-810c-fb91adda942e/) from URL group (0xFD00000320000003). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 18:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000002000000A. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/adba8f92-a1a0-472d-82a3-bc4a30f6ecd2/) from URL group (0xFF0000002000000A). Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 18:03:45 Service Control Manager 7040 None The start type of the Realtek 8167 NT Driver service was changed from demand start to disabled. Warning 26/08/2025 18:03:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 18:01:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 24 keys and creating 5 modified pages. Information 26/08/2025 18:01:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 28 keys and creating 3 modified pages. Information 26/08/2025 18:00:14 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 26/08/2025 17:59:41 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service RTL8167 for Device Instance ID PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_06\4&6AE81F7&0&00E2 with the following status: 0. Information 26/08/2025 17:59:41 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek 8167 NT Driver Service File Name: \SystemRoot\system32\DRIVERS\Rt64win7.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 26/08/2025 17:59:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e37e3b1b-6ab6-46ab-810c-fb91adda942e/) to URL group (0xFD00000320000003). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:59:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000320000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:59:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/adba8f92-a1a0-472d-82a3-bc4a30f6ecd2/) to URL group (0xFF0000002000000A). Status: 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:59:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000002000000A. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:58:54 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek RT640 NT Driver Service File Name: \SystemRoot\System32\drivers\rt640x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 26/08/2025 17:58:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:58:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9d8d833f-c882-476a-bfe9-129d571ca6e4/) from URL group (0xFE00000020000003). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:58:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000006. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:58:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5d8f34db-9a2e-4063-8d55-e7f3a8e5a6f8/) from URL group (0xFF00000120000006). Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:58:00 Service Control Manager 7040 None The start type of the Realtek RTOTS640 NT Driver service was changed from demand start to disabled. Information 26/08/2025 17:57:52 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Information 26/08/2025 17:57:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Edge.GameAssist_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 26/08/2025 17:57:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 26/08/2025 17:57:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\838898beeb9825a0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 26/08/2025 17:57:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 26/08/2025 17:54:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9d8d833f-c882-476a-bfe9-129d571ca6e4/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:54:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:54:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5d8f34db-9a2e-4063-8d55-e7f3a8e5a6f8/) to URL group (0xFF00000120000006). Status: 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:54:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000006. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:54:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000620000001. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:54:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5aee076c-666a-49ec-8513-7ec0544fb9cf/) from URL group (0xFF00000620000001). Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 17:53:39 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 17:53:39 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 26/08/2025 17:53:33 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 3264. Warning 26/08/2025 17:53:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 17:52:31 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Warning 26/08/2025 17:52:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 17:51:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 17:51:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4228. Warning 26/08/2025 17:50:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 17:50:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 17:50:53 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 26/08/2025 17:50:52 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎26T15:42:24.965971000Z Wake Time: ‎2025‎-‎08‎-‎26T16:50:51.485275200Z Wake Source: Unknown" Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 165" Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000120000005). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000720000003). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000020000002). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000320000003). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000003. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000720000002). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000320000002). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 17:50:51 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 165" Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 26/08/2025 17:50:51 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 26/08/2025 17:50:48 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎26T16:50:48.500000000Z from ‎2025‎-‎08‎-‎26T15:42:27.660116300Z. Time Delta: 4100839 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎26T17:50:48.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 16:42:27 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 26/08/2025 16:42:25 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 26/08/2025 16:42:24 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 165" Information 26/08/2025 16:42:24 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 26/08/2025 16:42:24 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 26/08/2025 16:42:22 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5062 milliseconds. Warning 26/08/2025 16:42:22 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5046 milliseconds. Information 26/08/2025 16:40:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:40:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 26/08/2025 16:40:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 16:38:24 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 16:38:24 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 26/08/2025 16:38:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 16:38:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:38:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:38:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:38:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000620000002). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000620000002). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000005). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000002). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000002). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:37:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000620000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Error 26/08/2025 16:36:52 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 26/08/2025 16:36:52 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 26/08/2025 16:36:52 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Warning 26/08/2025 16:36:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 16:36:29 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 26/08/2025 16:36:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 26/08/2025 16:36:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 26/08/2025 16:36:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000620000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:36:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000003). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:36:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:36:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000320000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:36:16 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS Information 26/08/2025 16:36:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 26/08/2025 16:36:15 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS Information 26/08/2025 16:36:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_1.1.41.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 26/08/2025 16:36:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 26/08/2025 16:36:08 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 26/08/2025 16:36:06 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 26/08/2025 16:36:06 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 26/08/2025 16:35:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25081.83.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 26/08/2025 16:35:41 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 26/08/2025 16:35:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22507.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 26/08/2025 16:35:29 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:35:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000001). Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:35:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25072.52.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 26/08/2025 16:35:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000001). Status: 0x0. Process Id 0x1244 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 26/08/2025 16:35:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 16:35:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 16:35:10 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 26/08/2025 16:35:10 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 26/08/2025 16:35:10 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 26/08/2025 16:34:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\24d6d943f6a838fe_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 26/08/2025 16:34:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 16:34:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 16:34:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 26/08/2025 16:34:08 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎26T08:10:39.247193800Z Wake Time: ‎2025‎-‎08‎-‎26T15:34:07.520965300Z Wake Source: Unknown" Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 165" Information 26/08/2025 16:34:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:34:07 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:34:07 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:34:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) from URL group (0xFE00000120000002). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 16:34:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 165" Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 26/08/2025 16:34:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 26/08/2025 16:34:04 EventLog 6013 None The system uptime is 27483 seconds. Information 26/08/2025 16:34:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎26T15:34:04.500000000Z from ‎2025‎-‎08‎-‎26T08:10:42.527000100Z. Time Delta: 26601972 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎26T16:34:04.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 26/08/2025 09:10:42 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 26/08/2025 09:10:39 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 26/08/2025 09:10:39 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 165" Information 26/08/2025 09:10:39 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 26/08/2025 09:10:39 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 26/08/2025 09:10:36 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5032 milliseconds. Information 26/08/2025 09:10:28 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 26/08/2025 09:08:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 26/08/2025 09:06:57 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:06:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:06:56 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:06:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 09:06:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 09:04:17 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 09:04:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:04:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:01:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 09:00:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 08:59:41 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 26/08/2025 08:59:37 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 26/08/2025 08:58:34 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 26/08/2025 08:58:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 26/08/2025 08:58:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 08:58:26 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 26/08/2025 08:58:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 26/08/2025 08:57:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 26/08/2025 08:57:03 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Warning 26/08/2025 08:56:45 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 08:56:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was cleared updating 15055 keys and creating 2540 modified pages. Information 26/08/2025 08:56:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\config\COMPONENTS was cleared updating 149955 keys and creating 13476 modified pages. Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9db1e9b3-9d21-478a-9cc7-f95c3faa31a4/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5aee076c-666a-49ec-8513-7ec0544fb9cf/) to URL group (0xFF00000620000001). Status: 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000620000001. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/8aa412f5-0f24-42be-b75a-25e4ae0cfc1c/) from URL group (0xFE00000220000001). Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2f88841f-3572-4e18-b436-722f33c22edb/) from URL group (0xFE00000120000001). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2f88841f-3572-4e18-b436-722f33c22edb/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8aa412f5-0f24-42be-b75a-25e4ae0cfc1c/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xE6C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/3654530d-41a1-4653-a1a2-5bdc0fa3c687/) from URL group (0xFE00000320000001). Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:24 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 26/08/2025 08:56:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 08:56:18 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 26/08/2025 08:56:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3654530d-41a1-4653-a1a2-5bdc0fa3c687/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x204 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 26/08/2025 08:56:13 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 26/08/2025 08:56:13 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 26/08/2025 08:56:13 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 26/08/2025 08:56:13 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:13 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:12 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 26/08/2025 08:56:12 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 26/08/2025 08:56:12 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 26/08/2025 08:56:12 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 26/08/2025 08:56:12 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 26/08/2025 08:56:12 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 26/08/2025 08:56:11 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 26/08/2025 08:56:11 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 26/08/2025 08:56:11 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 26/08/2025 08:56:07 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 26/08/2025 08:56:04 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 26/08/2025 08:56:04 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:04 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 26/08/2025 08:56:03 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:03 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:02 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 26/08/2025 08:56:02 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:02 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:02 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:02 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 26/08/2025 08:56:01 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎26T07:56:01.500000000Z. Loader time: ‎2025‎-‎08‎-‎26T07:56:01.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 26/08/2025 08:56:01 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎26T07:56:01.500000000Z. Information 25/08/2025 19:08:16 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎25T18:08:16.155898800Z. Information 25/08/2025 19:08:15 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 25/08/2025 19:08:14 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Off Event Code: 0x0 Reason: Kernel API" Information 25/08/2025 19:08:09 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:08:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/3604fae2-9bb3-4b2f-85a9-28017635d237/) from URL group (0xFE00000720000001). Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:08:09 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:08:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6a00f2dd-2b3d-4eaa-8fba-f4b445c452fa/) from URL group (0xFE00000320000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 26/08/2025 08:56:13 EventLog 6013 None The system uptime is 12 seconds. Information 26/08/2025 08:56:13 EventLog 6005 None The Event log service was started. Information 26/08/2025 08:56:13 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 25/08/2025 19:08:09 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 25/08/2025 19:08:09 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 25/08/2025 19:08:09 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 25/08/2025 19:08:09 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 25/08/2025 19:08:09 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 25/08/2025 19:08:09 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 25/08/2025 19:08:09 EventLog 6006 None The Event log service was stopped. Information 25/08/2025 19:07:43 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 25/08/2025 19:07:42 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5125 milliseconds. Warning 25/08/2025 19:07:42 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5094 milliseconds. Information 25/08/2025 19:07:36 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Warning 25/08/2025 19:06:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 25/08/2025 19:06:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 25/08/2025 19:05:57 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Information 25/08/2025 19:03:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 25/08/2025 19:03:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 25/08/2025 19:03:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 25/08/2025 19:03:39 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 25/08/2025 19:03:39 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 25/08/2025 19:02:13 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Warning 25/08/2025 19:01:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 25/08/2025 19:01:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6a00f2dd-2b3d-4eaa-8fba-f4b445c452fa/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3604fae2-9bb3-4b2f-85a9-28017635d237/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:01:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:01:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:01:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/68f1a747-bad1-4b9a-8e3b-339d506a99e2/) from URL group (0xFE00000620000001). Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:01:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d238b4fb-edd9-4d3b-ac00-8795a26abfcf/) from URL group (0xFE00000020000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:37 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 25/08/2025 19:01:35 Service Control Manager 7040 None The start type of the BITS service was changed from demand start to auto start. Information 25/08/2025 19:01:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d238b4fb-edd9-4d3b-ac00-8795a26abfcf/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:35 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/68f1a747-bad1-4b9a-8e3b-339d506a99e2/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 25/08/2025 19:01:35 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xE14 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 25/08/2025 19:01:28 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 25/08/2025 19:01:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 25/08/2025 19:01:21 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 25/08/2025 19:01:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 25/08/2025 19:01:21 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 25/08/2025 19:01:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:20 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 25/08/2025 19:01:20 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 25/08/2025 19:01:20 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 25/08/2025 19:01:20 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 25/08/2025 19:01:20 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 25/08/2025 19:01:20 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 25/08/2025 19:01:20 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 25/08/2025 19:01:20 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 25/08/2025 19:01:20 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 25/08/2025 19:01:15 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 25/08/2025 19:01:12 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 25/08/2025 19:01:12 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 25/08/2025 19:01:11 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:11 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 25/08/2025 19:01:10 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:10 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:10 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:10 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 25/08/2025 19:01:09 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎25T18:01:09.500000000Z. Loader time: ‎2025‎-‎08‎-‎25T18:01:08.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 25/08/2025 19:01:09 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎25T18:01:09.500000000Z. Information 24/08/2025 21:29:44 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T20:29:44.901247600Z. Information 24/08/2025 21:29:44 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 21:29:42 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 21:29:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xDF0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 21:29:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/67abbe06-3b95-4c6e-8ec9-e99229c155be/) from URL group (0xFE00000120000001). Process Id 0xDF0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 21:29:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0x518 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 21:29:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/19a5c6bd-5acc-454c-b2b1-9f5e44b16c33/) from URL group (0xFE00000420000001). Process Id 0x518 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 25/08/2025 19:01:21 EventLog 6013 None The system uptime is 11 seconds. Information 25/08/2025 19:01:21 EventLog 6005 None The Event log service was started. Information 25/08/2025 19:01:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 21:29:37 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 21:29:37 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 21:29:37 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 24/08/2025 21:29:37 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 21:29:37 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 21:29:37 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 21:29:37 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 21:29:31 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 21:29:28 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 7688 milliseconds. Warning 24/08/2025 21:29:21 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 10062 milliseconds. Error 24/08/2025 21:29:19 Microsoft-Windows-DistributedCOM 10010 None The server {69B7FE84-6361-4423-B948-1D64820B1E96} did not register with DCOM within the required timeout. Warning 24/08/2025 21:29:18 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 7187 milliseconds. Information 24/08/2025 21:29:09 User32 1074 None "The process C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeNotify.exe (PATRE-DESKTOP) has initiated the shutdown of computer PATRE-DESKTOP on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: " Information 24/08/2025 21:21:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 21:11:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 21:04:46 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 21:00:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 20:59:26 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-MICROSOFT.PEOPLE Information 24/08/2025 20:59:23 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay Information 24/08/2025 20:59:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 24/08/2025 20:59:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 24/08/2025 20:58:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 24/08/2025 20:58:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1106 keys and creating 63 modified pages. Information 24/08/2025 20:53:21 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy7) is healthy. No action is needed. Warning 24/08/2025 20:52:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 20:51:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 20:47:42 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 20:46:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 20:45:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000420000001). Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:44:38 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 24/08/2025 20:43:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000420000001). Status: 0x0. Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:43:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:43:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:43:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:40:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:40:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:40:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1688 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:40:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 24/08/2025 20:39:11 Service Control Manager 7046 None "The following service has repeatedly stopped responding to service control requests: Windows Search Contact the service vendor or the system administrator about whether to disable this service until the problem is identified. You may have to restart the computer in safe mode before you can disable the service." Error 24/08/2025 20:38:41 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:38:11 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:37:41 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:37:11 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:36:41 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Information 24/08/2025 20:36:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Error 24/08/2025 20:36:11 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:35:41 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 24/08/2025 20:35:11 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 24/08/2025 20:34:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 24/08/2025 20:34:41 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Information 24/08/2025 20:31:57 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 20:31:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 20:31:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 20:30:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 20:30:32 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy6) is healthy. No action is needed. Warning 24/08/2025 20:30:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 20:30:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 20:30:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 20:28:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/19a5c6bd-5acc-454c-b2b1-9f5e44b16c33/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x518 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:28:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x518 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 20:28:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/67abbe06-3b95-4c6e-8ec9-e99229c155be/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xDF0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 20:28:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xDF0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 20:28:24 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64sta.inf_amd64_2f6302cc7e285f42\rt25cx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 24/08/2025 20:28:21 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 20:28:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 20:28:09 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 20:28:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 20:28:04 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 20:28:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 20:28:04 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 20:28:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:28:02 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 20:28:02 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 20:28:02 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 20:28:02 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 20:28:02 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 20:28:02 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 20:28:02 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 20:28:02 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 20:28:02 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 20:27:57 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 20:27:55 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 20:27:54 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 20:27:54 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 20:27:54 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 24/08/2025 20:27:54 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 24/08/2025 20:27:54 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:53 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:53 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 20:27:52 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:52 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:52 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:52 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 20:27:51 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 20:28:04 EventLog 6013 None The system uptime is 12 seconds. Information 24/08/2025 20:28:04 EventLog 6005 None The Event log service was started. Information 24/08/2025 20:28:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 24/08/2025 20:28:04 EventLog 6008 None The previous system shutdown at 7:06:05 PM on ‎8/‎24/‎2025 was unexpected. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T19:27:51.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T19:27:50.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 20:27:51 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T19:27:51.500000000Z. Information 24/08/2025 19:05:55 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 19:05:54 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T18:05:54.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T18:05:54.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 19:05:54 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T18:05:54.500000000Z. Information 24/08/2025 19:05:02 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T18:05:02.919757100Z. Information 24/08/2025 19:05:02 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 19:04:59 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 19:06:05 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 19:06:05 EventLog 6005 None The Event log service was started. Information 24/08/2025 19:06:05 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 19:04:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 19:04:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 19:04:54 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 19:04:54 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 19:04:54 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 19:04:54 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 19:04:51 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 19:04:50 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5047 milliseconds. Warning 24/08/2025 19:04:45 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5062 milliseconds. Warning 24/08/2025 19:04:40 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 24/08/2025 19:04:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 24/08/2025 19:04:31 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 24/08/2025 19:03:58 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 netsh winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\cmd.exe C:\Windows\explorer.exe The locale specific resource for the desired message is not present " Warning 24/08/2025 18:54:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:31 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:31 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:54:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:54:31 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 18:54:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:53:44 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy5) is healthy. No action is needed. Warning 24/08/2025 18:52:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:52:29 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 18:52:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:52:22 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:52:19 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 18:52:19 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:52:19 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 18:52:19 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:18 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:17 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 18:52:17 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 18:52:17 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 18:52:17 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 18:52:17 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 18:52:17 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 18:52:17 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 18:52:17 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 18:52:17 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 18:52:13 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 18:52:10 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 18:52:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 18:52:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:52:09 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:09 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:09 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 18:52:08 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:08 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:08 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:52:07 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T17:52:07.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T17:52:07.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 18:52:07 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T17:52:07.500000000Z. Information 24/08/2025 18:51:16 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T17:51:16.757126700Z. Information 24/08/2025 18:51:16 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 18:51:14 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 18:52:19 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 18:52:19 EventLog 6005 None The Event log service was started. Information 24/08/2025 18:52:19 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 18:51:09 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:51:09 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:51:09 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 18:51:09 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 18:51:09 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 18:51:09 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 18:51:07 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 18:51:06 winsrvext 100 None Process C:\Windows\explorer.exe is delaying system shutdown after 5094 milliseconds. Error 24/08/2025 18:51:02 Service Control Manager 7009 None A timeout was reached (30000 milliseconds) while waiting for the Sync Host_88a12 service to connect. Information 24/08/2025 18:51:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 18:51:01 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Error 24/08/2025 18:51:01 Service Control Manager 7009 None A timeout was reached (30000 milliseconds) while waiting for the Sync Host_88a12 service to connect. Warning 24/08/2025 18:50:56 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5172 milliseconds. Warning 24/08/2025 18:50:56 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Information 24/08/2025 18:50:50 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 24/08/2025 18:50:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:50:12 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy4) is healthy. No action is needed. Warning 24/08/2025 18:49:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:49:01 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek RTOTS640 NT Driver Service File Name: \SystemRoot\System32\drivers\rtots640x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 24/08/2025 18:49:00 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 18:48:57 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:48:55 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:48:52 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 18:48:51 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:48:51 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 18:48:51 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:51 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:50 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 18:48:50 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 18:48:50 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 18:48:50 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 18:48:50 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 18:48:50 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 18:48:50 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 18:48:50 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 18:48:50 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 18:48:46 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 18:48:43 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 18:48:43 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 18:48:43 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:48:42 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:42 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:42 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 18:48:41 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:41 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:41 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:41 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:48:40 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T17:48:40.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T17:48:40.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 18:48:40 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T17:48:40.500000000Z. Information 24/08/2025 18:46:33 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T17:46:33.544644600Z. Information 24/08/2025 18:46:33 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 18:46:31 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 18:48:51 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 18:48:51 EventLog 6005 None The Event log service was started. Information 24/08/2025 18:48:51 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 18:46:26 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:46:26 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:46:26 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 18:46:26 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 18:46:26 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 18:46:26 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 18:46:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 18:46:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5125 milliseconds. Warning 24/08/2025 18:46:14 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 24/08/2025 18:46:08 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 24/08/2025 18:45:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:44:33 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy4) is healthy. No action is needed. Warning 24/08/2025 18:43:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:43:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:42:59 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 18:41:43 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy3) is healthy. No action is needed. Warning 24/08/2025 18:40:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:40:58 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 24/08/2025 18:40:58 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 24/08/2025 18:40:57 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_CORSAIR&PROD_SURVIVOR&REV_8.07#K8Z0UZ65&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 24/08/2025 18:40:57 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 24/08/2025 18:40:57 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 24/08/2025 18:40:57 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_CORSAIR&PROD_SURVIVOR&REV_8.07#K8Z0UZ65&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 24/08/2025 18:40:57 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Information 24/08/2025 18:40:55 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 18:40:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:40:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:43 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:40:42 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 18:40:42 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:40:42 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 18:40:42 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:42 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:41 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 18:40:41 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 18:40:41 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 18:40:41 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 18:40:41 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 18:40:41 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 18:40:41 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 18:40:41 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 18:40:41 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 18:40:36 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 18:40:33 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 18:40:33 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 18:40:33 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:40:32 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 24/08/2025 18:40:32 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:32 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:32 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 18:40:31 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:31 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:31 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:40:30 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 18:40:42 EventLog 6013 None The system uptime is 12 seconds. Information 24/08/2025 18:40:42 EventLog 6005 None The Event log service was started. Information 24/08/2025 18:40:42 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 24/08/2025 18:40:42 EventLog 6008 None The previous system shutdown at 6:28:40 PM on ‎8/‎24/‎2025 was unexpected. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T17:40:30.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T17:40:29.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 18:40:30 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T17:40:30.500000000Z. Warning 24/08/2025 18:35:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:35:06 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Warning 24/08/2025 18:34:22 disk 153 None The IO operation at logical block address 0x2699ed0 for Disk 0 (PDO name: \Device\00000030) was retried. Information 24/08/2025 18:33:01 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 24/08/2025 18:32:53 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 24/08/2025 18:30:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:30:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:30:58 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 18:29:32 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 24/08/2025 18:29:32 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 24/08/2025 18:28:55 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 18:28:53 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:28:46 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:28:45 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:28:41 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 18:28:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:28:41 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 18:28:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:40 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:39 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 18:28:39 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 18:28:39 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 18:28:39 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 18:28:39 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 18:28:39 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 18:28:39 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 18:28:39 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 18:28:39 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 18:28:35 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 18:28:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 18:28:32 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 18:28:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:28:31 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:31 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:31 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 18:28:30 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:30 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:30 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:30 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:28:29 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T17:28:29.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T17:28:29.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 18:28:29 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T17:28:29.500000000Z. Information 24/08/2025 18:27:39 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T17:27:39.378179500Z. Information 24/08/2025 18:27:39 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 18:27:33 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 18:28:40 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 18:28:40 EventLog 6005 None The Event log service was started. Information 24/08/2025 18:28:40 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 18:27:28 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:27:28 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 18:27:28 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:27:28 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 18:27:28 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 18:27:28 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 18:27:17 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 18:27:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5015 milliseconds. Warning 24/08/2025 18:27:14 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 24/08/2025 18:27:07 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 24/08/2025 18:25:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 18:20:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 18:16:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 24/08/2025 18:12:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:09:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:08:55 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 24/08/2025 18:08:54 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 24/08/2025 18:08:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 18:08:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:08:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 18:06:58 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Warning 24/08/2025 18:06:41 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:06:24 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 18:06:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:06:20 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 18:06:16 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 18:06:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:06:16 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 18:06:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:16 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:15 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:15 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 18:06:15 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 18:06:15 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 18:06:15 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 18:06:14 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 18:06:14 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 18:06:14 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 18:06:14 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 18:06:14 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 18:06:14 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 18:06:05 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 18:06:05 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 18:06:05 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 18:06:04 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:04 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:04 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 18:06:03 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:03 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:03 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:03 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 18:06:02 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T17:06:02.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T17:06:01.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 18:06:02 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T17:06:02.500000000Z. Information 24/08/2025 18:05:11 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T17:05:11.205368900Z. Information 24/08/2025 18:05:10 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 18:05:06 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 18:06:16 EventLog 6013 None The system uptime is 13 seconds. Information 24/08/2025 18:06:16 EventLog 6005 None The Event log service was started. Information 24/08/2025 18:06:16 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 18:05:01 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:05:01 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 18:05:01 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 18:05:01 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 18:05:01 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 18:05:01 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 18:04:51 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 18:04:46 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 24/08/2025 18:04:39 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 24/08/2025 18:04:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 18:00:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 24/08/2025 18:00:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:59:10 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Warning 24/08/2025 17:58:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:58:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:58:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 17:57:05 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Warning 24/08/2025 17:56:45 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:56:39 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 17:56:26 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:56:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:56:21 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 17:56:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:56:21 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 17:56:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:56:21 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:21 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:21 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:20 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 17:56:20 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 17:56:20 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 17:56:20 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 17:56:20 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 17:56:20 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 17:56:19 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 17:56:19 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 17:56:19 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 17:56:14 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 17:56:12 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 17:56:12 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 17:56:12 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:56:11 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:11 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:11 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 17:56:10 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:10 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:10 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:10 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:56:09 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T16:56:09.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T16:56:08.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 17:56:09 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T16:56:09.500000000Z. Information 24/08/2025 17:55:18 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T16:55:18.204515200Z. Information 24/08/2025 17:55:17 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 17:55:14 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 17:56:21 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 17:56:21 EventLog 6005 None The Event log service was started. Information 24/08/2025 17:56:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 17:55:09 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 17:55:09 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 17:55:09 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 17:55:09 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 17:55:09 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 17:55:09 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 17:55:01 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 24/08/2025 17:54:59 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 24/08/2025 17:54:54 Microsoft-Windows-DistributedCOM 10010 None The server {C53A4F16-787E-42A4-B304-29EFFB4BF597} did not register with DCOM within the required timeout. Information 24/08/2025 17:54:51 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 24/08/2025 17:53:39 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 24/08/2025 17:53:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x71C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:53:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/84ebd4c7-d9d1-4820-bab4-7e83b8129b16/) from URL group (0xFE00000120000001). Process Id 0x71C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:53:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xE90 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:53:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ffcc8bce-1ebd-4c1e-bb7d-412325358ab7/) from URL group (0xFE00000020000001). Process Id 0xE90 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:53:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:52:53 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Information 24/08/2025 17:49:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a183c0e30fabd94e_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 24/08/2025 17:48:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:47:07 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64sta.inf_amd64_2f6302cc7e285f42\rt25cx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 24/08/2025 17:46:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 17:46:33 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Warning 24/08/2025 17:45:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:45:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:45:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 17:44:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:43:50 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Warning 24/08/2025 17:43:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:43:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/84ebd4c7-d9d1-4820-bab4-7e83b8129b16/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x71C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:43:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x71C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:43:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ffcc8bce-1ebd-4c1e-bb7d-412325358ab7/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xE90 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:43:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0xE90 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:43:17 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 24/08/2025 17:43:13 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:43:12 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:43:08 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 17:43:08 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:43:08 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 17:43:08 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:43:07 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 17:43:07 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 17:43:07 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 17:43:07 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 17:43:07 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 17:43:07 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 17:43:06 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 17:43:06 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 17:43:06 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 17:43:02 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 17:42:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 17:42:59 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 17:42:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:42:58 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:58 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:58 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 17:42:57 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:57 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:57 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:42:56 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T16:42:56.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T16:42:55.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 17:42:56 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T16:42:56.500000000Z. Information 24/08/2025 17:42:04 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎24T16:42:04.465815400Z. Information 24/08/2025 17:42:03 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 24/08/2025 17:41:59 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 24/08/2025 17:43:08 EventLog 6013 None The system uptime is 11 seconds. Information 24/08/2025 17:43:08 EventLog 6005 None The Event log service was started. Information 24/08/2025 17:43:08 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 24/08/2025 17:41:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 17:41:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 24/08/2025 17:41:54 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 24/08/2025 17:41:54 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 24/08/2025 17:41:54 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 24/08/2025 17:41:54 EventLog 6006 None The Event log service was stopped. Information 24/08/2025 17:41:28 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 24/08/2025 17:41:24 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 24/08/2025 17:41:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Information 24/08/2025 17:41:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000003. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:41:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0d616cdc-b64f-44d5-a27e-dfeb3e8cb85f/) from URL group (0xFE00000120000003). Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:41:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000420000006. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:41:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/78c8ef4d-5fa2-4475-87b1-237f12a3be89/) from URL group (0xFF00000420000006). Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:41:19 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 24/08/2025 17:41:12 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 24/08/2025 17:40:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000420000002). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000420000002). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000420000001). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000420000001). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000001). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:40:21 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Information 24/08/2025 17:40:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000004). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:39:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000004). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:39:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000003). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:39:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000003). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 24/08/2025 17:39:05 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name t-ring-fdv2.msedge.net timed out after none of the configured DNS servers responded. Client PID 16148. Information 24/08/2025 17:38:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenub_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\8eb37732c02a75ce_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:38:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:38:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:38:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenua_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a74c416bf60c1d4d_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:38:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:38:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Warning 24/08/2025 17:38:32 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9752. Warning 24/08/2025 17:38:28 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name bolt.dropbox.com timed out after none of the configured DNS servers responded. Client PID 3080. Warning 24/08/2025 17:38:26 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s19.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3920. Warning 24/08/2025 17:38:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name api.dropbox.com timed out after none of the configured DNS servers responded. Client PID 3080. Information 24/08/2025 17:38:00 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 24/08/2025 17:36:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 17:34:55 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 24/08/2025 17:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0d616cdc-b64f-44d5-a27e-dfeb3e8cb85f/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:33:59 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000003. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/78c8ef4d-5fa2-4475-87b1-237f12a3be89/) to URL group (0xFF00000420000006). Status: 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:33:59 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000420000006. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:33:59 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name web-api-tih.acronis.com timed out after none of the configured DNS servers responded. Client PID 13172. Warning 24/08/2025 17:33:58 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3920. Information 24/08/2025 17:33:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000720000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:33:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/62aa2d98-e48b-44a1-9eb6-97f8f5818ef9/) from URL group (0xFF00000720000001). Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:33:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:33:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/855386c3-ed0b-40bd-84be-2e59bab19363/) from URL group (0xFE00000320000001). Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:33:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9752. Warning 24/08/2025 17:33:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl.acronis.com timed out after none of the configured DNS servers responded. Client PID 8376. Warning 24/08/2025 17:33:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 3920. Information 24/08/2025 17:33:34 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 24/08/2025 17:33:34 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 24/08/2025 17:33:34 Virtual Disk Service 4 None Service stopped. Information 24/08/2025 17:33:31 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Warning 24/08/2025 17:33:29 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:33:29 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 24/08/2025 17:33:28 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\{31A4897A-8107-11F0-9D5C-F1D643E915AD}#0000000000100000 with the following status: 0. Information 24/08/2025 17:33:28 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 24/08/2025 17:33:28 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 24/08/2025 17:33:28 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\{31A4897A-8107-11F0-9D5C-F1D643E915AD}#0000000000100000. Warning 24/08/2025 17:33:27 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name client.wns.windows.com timed out after none of the configured DNS servers responded. Client PID 5020. Warning 24/08/2025 17:33:24 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name default.exp-tas.com timed out after none of the configured DNS servers responded. Client PID 13528. Information 24/08/2025 17:33:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:33:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 24/08/2025 17:32:13 Virtual Disk Service 3 None Service started. Information 24/08/2025 17:31:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 24/08/2025 17:31:48 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl.acronis.com timed out after none of the configured DNS servers responded. Client PID 8376. Information 24/08/2025 17:31:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/62aa2d98-e48b-44a1-9eb6-97f8f5818ef9/) to URL group (0xFF00000720000001). Status: 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:48 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000720000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/855386c3-ed0b-40bd-84be-2e59bab19363/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:31:48 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:31:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14088. Warning 24/08/2025 17:31:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name www.amazon.co.uk timed out after none of the configured DNS servers responded. Client PID 18068. Information 24/08/2025 17:31:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/afd7b84e-dbc4-4b8a-b4ac-a050410a42dc/) from URL group (0xFE00000020000001). Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:31:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000420000005. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:31:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e900add9-2646-47ca-9f8e-d9855da3456a/) from URL group (0xFF00000420000005). Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:31:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14088. Warning 24/08/2025 17:31:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name android.clients.google.com timed out after none of the configured DNS servers responded. Client PID 18068. Warning 24/08/2025 17:31:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14088. Information 24/08/2025 17:31:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 24/08/2025 17:31:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 9752. Information 24/08/2025 17:30:52 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:30:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:30:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:30:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:30:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1314 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:30:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 24/08/2025 17:29:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:29:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 24/08/2025 17:29:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:29:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:29:41 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 24/08/2025 17:29:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 24/08/2025 17:29:07 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 24/08/2025 17:29:06 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 24/08/2025 17:28:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:27:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 24/08/2025 17:27:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\89bc9879cd777c28_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:27:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 24 keys and creating 6 modified pages. Information 24/08/2025 17:27:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/afd7b84e-dbc4-4b8a-b4ac-a050410a42dc/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e900add9-2646-47ca-9f8e-d9855da3456a/) to URL group (0xFF00000420000005). Status: 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000420000005. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000220000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/418a1464-8f0c-491f-a8e9-992292722d7a/) from URL group (0xFF00000220000001). Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/2fe17e50-910b-4f8d-801e-d888952e4299/) from URL group (0xFE00000620000001). Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 24/08/2025 17:27:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/418a1464-8f0c-491f-a8e9-992292722d7a/) to URL group (0xFF00000220000001). Status: 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000001. Status 0x0. Process Id 0x7A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:27:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/2fe17e50-910b-4f8d-801e-d888952e4299/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xE00 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:27:39 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam uiomap" Warning 24/08/2025 17:27:33 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:27:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 24/08/2025 17:27:27 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 24/08/2025 17:27:27 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:27:27 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 24/08/2025 17:27:27 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 24/08/2025 17:27:26 Service Control Manager 7040 None The start type of the wanarp service was changed from demand start to auto start. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:26 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:25 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 24/08/2025 17:27:25 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 24/08/2025 17:27:25 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 24/08/2025 17:27:25 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 24/08/2025 17:27:25 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 24/08/2025 17:27:25 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 24/08/2025 17:27:25 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 24/08/2025 17:27:25 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 24/08/2025 17:27:25 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 24/08/2025 17:27:18 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 17:27:17 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 24/08/2025 17:27:17 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 24/08/2025 17:27:17 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 24/08/2025 17:27:16 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 24/08/2025 17:27:16 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:16 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:16 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 24/08/2025 17:27:15 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:15 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:15 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 24/08/2025 17:27:14 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 24/08/2025 17:27:27 EventLog 6013 None The system uptime is 12 seconds. Information 24/08/2025 17:27:27 EventLog 6005 None The Event log service was started. Information 24/08/2025 17:27:27 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 24/08/2025 17:27:27 EventLog 6008 None The previous system shutdown at 8:19:44 PM on ‎8/‎23/‎2025 was unexpected. Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎24T16:27:14.500000000Z. Loader time: ‎2025‎-‎08‎-‎24T16:27:14.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 24/08/2025 17:27:14 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎24T16:27:14.500000000Z. Information 24/08/2025 17:25:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 24/08/2025 17:25:23 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from disabled to demand start. Information 24/08/2025 17:23:51 Service Control Manager 7040 None The start type of the Realtek NetAdapter Driver service was changed from demand start to disabled. Information 24/08/2025 17:23:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 24/08/2025 17:21:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:21:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:21:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/feafb106-0ef0-4982-babe-c29022574abf/) from URL group (0xFE00000420000003). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:21:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000005. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:21:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e7d8ed26-f2ec-414c-ad51-20fada702ef6/) from URL group (0xFE00000220000005). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:21:14 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe winsock reset C:\Windows\System32\netsh.exe C:\Windows\System32\netsh.exe The locale specific resource for the desired message is not present " Information 24/08/2025 17:21:14 Service Control Manager 7040 None The start type of the Remote Access IP ARP Driver service was changed from auto start to demand start. Information 24/08/2025 17:21:13 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netcfg.exe -d C:\Windows\System32\netcfg.exe C:\Windows\System32\netsh.exe The locale specific resource for the desired message is not present " Information 24/08/2025 17:21:13 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 ""C:\WINDOWS\system32\netsh.exe"" trace diagnose scenario=NetworkReset C:\Windows\System32\netsh.exe The locale specific resource for the desired message is not present " Information 24/08/2025 17:20:27 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1A68B826-71C0-4F1F-9933-10C7B560FF42} because a master browser was stopped. Warning 24/08/2025 17:19:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:19:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:19:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s06.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4380. Warning 24/08/2025 17:19:43 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name nnvzct8vg7.execute-api.eu-west-1.amazonaws.com timed out after none of the configured DNS servers responded. Client PID 14312. Information 24/08/2025 17:19:32 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1A68B826-71C0-4F1F-9933-10C7B560FF42} because a master browser was stopped. Warning 24/08/2025 17:19:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:18:35 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎24T16:18:35.897079100Z from ‎2025‎-‎08‎-‎24T16:18:35.897012600Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 15160). RTC time: ‎2025‎-‎08‎-‎24T17:18:35.897079100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 24/08/2025 17:18:35 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 17:18:35 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 24/08/2025 17:18:35 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎24T16:18:35.895449400Z from ‎2025‎-‎08‎-‎24T16:18:32.929927300Z. Time Delta: 2965 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 15160). RTC time: ‎2025‎-‎08‎-‎24T17:18:35.895449400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 24/08/2025 17:18:35 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 24/08/2025 17:18:32 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 24/08/2025 17:18:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name up.freedownloadmanager.org timed out after none of the configured DNS servers responded. Client PID 19472. Warning 24/08/2025 17:18:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name events.gfe.nvidia.com timed out after none of the configured DNS servers responded. Client PID 2004. Warning 24/08/2025 17:18:08 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 18064. Warning 24/08/2025 17:17:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name settings-win.data.microsoft.com timed out after none of the configured DNS servers responded. Client PID 5012. Warning 24/08/2025 17:17:56 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 18064. Warning 24/08/2025 17:17:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name updates.logitech.com timed out after none of the configured DNS servers responded. Client PID 18064. Warning 24/08/2025 17:17:45 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/feafb106-0ef0-4982-babe-c29022574abf/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e7d8ed26-f2ec-414c-ad51-20fada702ef6/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000005. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000120000010. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 24/08/2025 17:17:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/b7787516-dbce-4b6f-aa73-7731df12d3f0/) from URL group (0xFD00000120000010). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 24/08/2025 17:17:28 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 22992. Warning 24/08/2025 17:17:17 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4380. Warning 24/08/2025 17:17:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 24/08/2025 17:17:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 24/08/2025 17:17:06 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 24/08/2025 17:17:03 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎23T19:42:17.716227600Z Wake Time: ‎2025‎-‎08‎-‎24T16:17:02.684783000Z Wake Source: Unknown" Information 24/08/2025 17:17:03 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 153" Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000002. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFE00000420000002). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000002. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000004. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFE00000220000004). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000004. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000320000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFC00000320000003). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFC00000320000003). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000320000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000320000002. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFC00000320000002). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFC00000320000002). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000320000002. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000520000005. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFF00000520000005). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFF00000520000005). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000520000005. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFB00000120000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) from URL group (0xFB00000120000001). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 24/08/2025 17:17:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 24/08/2025 17:17:02 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 24/08/2025 17:17:02 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 153" Information 24/08/2025 17:17:02 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 24/08/2025 17:17:02 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 24/08/2025 17:17:02 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 24/08/2025 17:17:02 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 24/08/2025 17:17:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎24T16:17:00.500000000Z from ‎2025‎-‎08‎-‎23T19:42:20.487078600Z. Time Delta: 74080012 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎24T17:17:00.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/08/2025 20:42:20 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 24/08/2025 17:17:00 EventLog 6013 None The system uptime is 75447 seconds. Information 23/08/2025 20:42:20 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1A68B826-71C0-4F1F-9933-10C7B560FF42} because a master browser was stopped. Information 23/08/2025 20:42:17 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 23/08/2025 20:42:17 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 153" Information 23/08/2025 20:42:17 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 23/08/2025 20:42:17 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 23/08/2025 20:42:15 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 23/08/2025 20:42:07 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Warning 23/08/2025 20:41:58 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:41:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:41:58 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:41:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:40:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 20:39:18 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 23/08/2025 20:38:42 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 23/08/2025 20:36:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 20:34:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 23/08/2025 20:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. Information 23/08/2025 20:32:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 23/08/2025 20:32:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:30:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 23/08/2025 20:29:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 23/08/2025 20:27:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ec30e41e-d5c2-441a-899c-2ccd7ccf945a/) to URL group (0xFB00000120000001). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:27:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFB00000120000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:27:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/b7787516-dbce-4b6f-aa73-7731df12d3f0/) to URL group (0xFD00000120000010). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:27:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000120000010. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:27:25 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64sta.inf_amd64_2f6302cc7e285f42\rt25cx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 23/08/2025 20:27:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:27:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/07cc5c70-e6a7-4eab-9740-9b5c501ebddb/) from URL group (0xFE00000620000003). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:27:14 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000003. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:27:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7eabdf3f-95af-49db-929e-78d270aada19/) from URL group (0xFE00000220000003). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:26:54 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{3901D0C7-FBB0-47D1-8429-D6CF5B3EA427} because a master browser was stopped. Information 23/08/2025 20:26:11 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{3901D0C7-FBB0-47D1-8429-D6CF5B3EA427} because a master browser was stopped. Information 23/08/2025 20:26:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 23/08/2025 20:26:09 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 23/08/2025 20:25:23 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{3901D0C7-FBB0-47D1-8429-D6CF5B3EA427} because a master browser was stopped. Warning 23/08/2025 20:25:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:23:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 20:23:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/07cc5c70-e6a7-4eab-9740-9b5c501ebddb/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:23:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000003. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:23:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7eabdf3f-95af-49db-929e-78d270aada19/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:23:04 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:22:56 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:22:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:22:40 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek NetAdapter Driver Service File Name: \SystemRoot\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 23/08/2025 20:22:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000320000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:22:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7f04d38d-cffb-4300-ba36-0c4fbbf10f93/) from URL group (0xFC00000320000001). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:22:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000320000006. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:22:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/8a115ea2-8c63-4a23-8edc-fdb273f38469/) from URL group (0xFD00000320000006). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:22:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 32 keys and creating 4 modified pages. Information 23/08/2025 20:22:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e7378ca3062113fe_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:22:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 23/08/2025 20:22:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:22:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:22:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 12 keys and creating 1 modified pages. Information 23/08/2025 20:22:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 104 keys and creating 12 modified pages. Information 23/08/2025 20:22:10 Service Control Manager 7040 None The start type of the Realtek RT640 NT Driver service was changed from demand start to disabled. Warning 23/08/2025 20:22:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:21:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:21:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:21:58 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 23/08/2025 20:21:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\DropboxInc.Dropbox_wkt425jdc3sga\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\19f22c6fd88bbbf7_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:21:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:21:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Information 23/08/2025 20:21:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0xFA0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:21:36 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Warning 23/08/2025 20:21:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name t-ring-fdv2.msedge.net timed out after none of the configured DNS servers responded. Client PID 16416. Information 23/08/2025 20:21:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xFA0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:21:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0xFA0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:21:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xFA0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:21:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\40dfb99aa8fbeb29_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:21:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 23/08/2025 20:21:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 4 modified pages. Information 23/08/2025 20:21:11 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 23/08/2025 20:21:10 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 23/08/2025 20:21:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7f04d38d-cffb-4300-ba36-0c4fbbf10f93/) to URL group (0xFC00000320000001). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000320000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8a115ea2-8c63-4a23-8edc-fdb273f38469/) to URL group (0xFD00000320000006). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000320000006. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000320000005. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/786c0932-8830-4ee2-9e68-384e6001fe2a/) from URL group (0xFD00000320000005). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7ff43242-4150-44db-af23-38384c1d4a39/) from URL group (0xFC00000120000001). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:37 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 20:20:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 23/08/2025 20:20:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 10 modified pages. Information 23/08/2025 20:20:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 23/08/2025 20:20:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 17 keys and creating 1 modified pages. Information 23/08/2025 20:20:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 36 keys and creating 7 modified pages. Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/786c0932-8830-4ee2-9e68-384e6001fe2a/) to URL group (0xFD00000320000005). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000320000005. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000220000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/dc97cbc4-16cc-497d-9c37-a0b4398f1c64/) from URL group (0xFF00000220000001). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7ff43242-4150-44db-af23-38384c1d4a39/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000002. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:20:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f52a59ce-c257-4c53-94a0-bfff6d0813ec/) from URL group (0xFE00000620000002). Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:19:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/dc97cbc4-16cc-497d-9c37-a0b4398f1c64/) to URL group (0xFF00000220000001). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f52a59ce-c257-4c53-94a0-bfff6d0813ec/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:19:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000002. Status 0x0. Process Id 0xDB8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:19:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\87b68362b9c83648_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:19:56 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam uiomap" Information 23/08/2025 20:19:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9ee7c01f-651c-4f52-b0d2-b0616763ffda/) from URL group (0xFE00000620000001). Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 20:19:50 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 23/08/2025 20:19:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 11337 keys and creating 1136 modified pages. Information 23/08/2025 20:19:49 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\ntuser.dat was reorganized with a starting size of 8052736 bytes and an ending size of 7565312 bytes. Information 23/08/2025 20:19:48 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/08/2025 20:19:46 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 7110656 bytes and an ending size of 7024640 bytes. Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xE98 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xE98 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9ee7c01f-651c-4f52-b0d2-b0616763ffda/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0x7C0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:45 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:19:44 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 23/08/2025 20:19:44 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 23/08/2025 20:19:44 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 23/08/2025 20:19:44 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:44 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:43 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 23/08/2025 20:19:43 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 23/08/2025 20:19:43 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 23/08/2025 20:19:43 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 23/08/2025 20:19:43 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 23/08/2025 20:19:43 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 23/08/2025 20:19:43 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 23/08/2025 20:19:43 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 23/08/2025 20:19:43 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 23/08/2025 20:19:36 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 23/08/2025 20:19:36 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 93 keys and creating 8 modified pages. Information 23/08/2025 20:19:36 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:19:35 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:35 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:35 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 23/08/2025 20:19:34 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:34 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:34 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:34 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:19:33 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎23T19:19:33.500000000Z. Loader time: ‎2025‎-‎08‎-‎23T19:19:32.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 23/08/2025 20:19:33 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎23T19:19:33.500000000Z. Information 23/08/2025 20:19:10 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎23T19:19:10.808572700Z. Information 23/08/2025 20:19:10 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 23/08/2025 20:19:07 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 23/08/2025 20:19:03 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xF18 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000120000001). Process Id 0xF18 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:19:02 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 23/08/2025 20:19:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 23/08/2025 20:19:44 EventLog 6013 None The system uptime is 11 seconds. Information 23/08/2025 20:19:44 EventLog 6005 None The Event log service was started. Information 23/08/2025 20:19:44 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 23/08/2025 20:19:02 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 23/08/2025 20:19:02 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 23/08/2025 20:19:02 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 23/08/2025 20:19:02 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 23/08/2025 20:19:02 EventLog 6006 None The Event log service was stopped. Information 23/08/2025 20:19:00 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 23/08/2025 20:18:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/308d966d-77d2-4774-9a35-c477b790b157/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:18:59 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000002. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:18:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9a3dc5af-a835-4c44-8099-67956b9477f1/) to URL group (0xFF00000620000003). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:18:59 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000620000003. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:18:54 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 23/08/2025 20:18:54 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 23/08/2025 20:18:48 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 23/08/2025 20:18:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000320000005. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:18:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/cf603f6e-a8c7-4b03-a176-06d23e516ab8/) from URL group (0xFF00000320000005). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:18:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000004. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:18:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/15ec3b65-bd0b-4936-8912-5ba72bdcb4b4/) from URL group (0xFE00000520000004). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:18:32 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name p19.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:18:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:18:22 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:18:21 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dc1-pp.ksn.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:18:11 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:17:59 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Information 23/08/2025 20:17:24 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 20:16:54 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/cf603f6e-a8c7-4b03-a176-06d23e516ab8/) to URL group (0xFF00000320000005). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000320000005. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e74fef79-e47a-4972-948e-1a1abef34766/) from URL group (0xFE00000020000003). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/15ec3b65-bd0b-4936-8912-5ba72bdcb4b4/) to URL group (0xFE00000520000004). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000004. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000003. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:16:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/35fe4fde-a580-4574-a6db-076406c2b5f3/) from URL group (0xFE00000520000003). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:15:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e74fef79-e47a-4972-948e-1a1abef34766/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/8b41befd-3648-4d39-831f-de56afbc652f/) from URL group (0xFE00000020000002). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/35fe4fde-a580-4574-a6db-076406c2b5f3/) to URL group (0xFE00000520000003). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:15:37 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000003. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:15:34 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Information 23/08/2025 20:15:33 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:15:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0bdb7abe-7f42-468c-860b-8f2e570b1806/) from URL group (0xFE00000420000001). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:15:22 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:15:21 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:15:16 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name bolt.dropbox.com timed out after none of the configured DNS servers responded. Client PID 4968. Information 23/08/2025 20:15:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/8b41befd-3648-4d39-831f-de56afbc652f/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:15:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0bdb7abe-7f42-468c-860b-8f2e570b1806/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:15:12 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:15:11 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:15:10 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:15:05 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name p06.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:15:00 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:14:59 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:14:54 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:14:48 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name kv601.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 3256. Warning 23/08/2025 20:14:48 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:14:43 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:14:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name self.events.data.microsoft.com timed out after none of the configured DNS servers responded. Client PID 4468. Information 23/08/2025 20:14:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Warning 23/08/2025 20:14:26 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gew1-dealer.g2.spotify.com timed out after none of the configured DNS servers responded. Client PID 5112. Information 23/08/2025 20:14:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 20 keys and creating 3 modified pages. Warning 23/08/2025 20:14:19 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s08.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4476. Information 23/08/2025 20:14:18 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000002. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:14:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/759867bc-c4f9-422b-89e8-a54343b589b0/) from URL group (0xFE00000520000002). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:14:18 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:14:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f51031f8-7e54-447a-a69c-eefbcb15a80c/) from URL group (0xFE00000020000001). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 20:14:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ap-gew1.spotify.com timed out after none of the configured DNS servers responded. Client PID 5112. Information 23/08/2025 20:13:38 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 20:13:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f51031f8-7e54-447a-a69c-eefbcb15a80c/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:13:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:13:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/759867bc-c4f9-422b-89e8-a54343b589b0/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:13:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000002. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:13:10 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:13:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:13:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl-debug.dropbox.com timed out after none of the configured DNS servers responded. Client PID 4968. Information 23/08/2025 20:13:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 23/08/2025 20:13:02 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Information 23/08/2025 20:13:00 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000220000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:13:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7aa7a9c5-50c1-4a37-847f-a43b362c1165/) from URL group (0xFD00000220000001). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:13:00 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000120000002. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:13:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/93b5c4f9-05e4-4d6e-ad43-9b9a25aff2e6/) from URL group (0xFD00000120000002). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:12:58 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl.acronis.com timed out after none of the configured DNS servers responded. Client PID 7832. Warning 23/08/2025 20:12:57 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl-debug.dropbox.com timed out after none of the configured DNS servers responded. Client PID 4968. Information 23/08/2025 20:12:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7aa7a9c5-50c1-4a37-847f-a43b362c1165/) to URL group (0xFD00000220000001). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:12:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000220000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:12:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/93b5c4f9-05e4-4d6e-ad43-9b9a25aff2e6/) to URL group (0xFD00000120000002). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:12:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000120000002. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:12:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:12:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-tcert-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:12:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:12:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s09.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:12:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:12:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:12:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dc1-cert.ksn.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:12:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:12:20 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name p12.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:12:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:12:09 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:12:04 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name platform.wondershare.com timed out after none of the configured DNS servers responded. Client PID 22292. Warning 23/08/2025 20:11:52 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:11:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:11:47 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo.prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Client PID 3256. Information 23/08/2025 20:11:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Warning 23/08/2025 20:11:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Warning 23/08/2025 20:11:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:11:26 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name crl3.digicert.com timed out after none of the configured DNS servers responded. Client PID 5700. Warning 23/08/2025 20:11:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name arc.msn.com timed out after none of the configured DNS servers responded. Client PID 13676. Warning 23/08/2025 20:10:53 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:10:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:10:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:10:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 23/08/2025 20:10:49 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ksn-url-geo.kaspersky-labs.com timed out after none of the configured DNS servers responded. Client PID 4476. Warning 23/08/2025 20:10:48 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ocsp.digicert.com timed out after none of the configured DNS servers responded. Client PID 5700. Warning 23/08/2025 20:10:43 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 14420. Information 23/08/2025 20:10:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:10:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/82b82158-fe97-4b06-b4b3-93c3afd80aab/) from URL group (0xFE00000220000001). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:10:41 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:10:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ff12bc0a-80a9-443d-8f13-eba5d0b1aa95/) from URL group (0xFE00000720000001). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:10:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 10020. Warning 23/08/2025 20:10:33 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name client.brightvpn.com timed out after none of the configured DNS servers responded. Client PID 14808. Warning 23/08/2025 20:10:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:10:21 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 20:09:55 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 23/08/2025 20:08:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/82b82158-fe97-4b06-b4b3-93c3afd80aab/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:58 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:58 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7b8e9631-993a-453f-9c5c-08a478195885/) from URL group (0xFC00000120000001). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 20:08:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 20:08:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 20:08:51 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam uiomap" Information 23/08/2025 20:08:51 Service Control Manager 7040 None The start type of the BITS service was changed from demand start to auto start. Warning 23/08/2025 20:08:45 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 23/08/2025 20:08:44 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/08/2025 20:08:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ff12bc0a-80a9-443d-8f13-eba5d0b1aa95/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:08:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:08:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7b8e9631-993a-453f-9c5c-08a478195885/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/a72771e7-b8e9-40b1-bb05-fcb5a7c3572b/) from URL group (0xFE00000520000001). Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xF18 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xF18 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/a72771e7-b8e9-40b1-bb05-fcb5a7c3572b/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0x7D4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 23/08/2025 20:08:41 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Warning 23/08/2025 20:08:41 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 23/08/2025 20:08:41 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 23/08/2025 20:08:41 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 23/08/2025 20:08:40 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 23/08/2025 20:08:40 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 23/08/2025 20:08:40 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 23/08/2025 20:08:40 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:40 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:39 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 23/08/2025 20:08:39 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 23/08/2025 20:08:39 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 23/08/2025 20:08:39 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 23/08/2025 20:08:39 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 23/08/2025 20:08:39 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 23/08/2025 20:08:38 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 23/08/2025 20:08:38 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 23/08/2025 20:08:38 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 23/08/2025 20:08:31 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 23/08/2025 20:08:31 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 23/08/2025 20:08:31 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 23/08/2025 20:08:30 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:30 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:30 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 23/08/2025 20:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 20:08:28 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎23T19:08:28.500000000Z. Loader time: ‎2025‎-‎08‎-‎23T19:08:28.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 23/08/2025 20:08:28 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎23T19:08:28.500000000Z. Information 23/08/2025 20:08:07 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎23T19:08:07.143660800Z. Information 23/08/2025 20:08:06 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 23/08/2025 20:08:06 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 23/08/2025 20:08:02 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000120000001). Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:01 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000052000000F. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:08:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f167908b-1bf8-4fee-887e-02f634d8f386/) from URL group (0xFE0000052000000F). Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:08:01 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000320000034. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/81750250-0df0-4c1e-8585-5ffcb66d92ff/) from URL group (0xFF00000320000034). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:08:01 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 23/08/2025 20:08:01 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 23/08/2025 20:08:40 EventLog 6013 None The system uptime is 12 seconds. Information 23/08/2025 20:08:40 EventLog 6005 None The Event log service was started. Information 23/08/2025 20:08:40 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 23/08/2025 20:08:01 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 23/08/2025 20:08:01 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 23/08/2025 20:08:01 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 23/08/2025 20:08:01 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 23/08/2025 20:08:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎23T19:08:01.280071900Z from ‎2025‎-‎08‎-‎23T19:08:01.278924600Z. Time Delta: 1 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎23T20:08:01.280071900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/08/2025 20:08:01 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Error 23/08/2025 20:08:01 Service Control Manager 7043 None The Acronis Managed Machine Service Mini service did not shut down properly after receiving a preshutdown control. Information 23/08/2025 20:08:01 EventLog 6006 None The Event log service was stopped. Error 23/08/2025 20:07:45 Service Control Manager 7043 None The Acronis Nonstop Backup Service service did not shut down properly after receiving a preshutdown control. Information 23/08/2025 20:07:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f167908b-1bf8-4fee-887e-02f634d8f386/) to URL group (0xFE0000052000000F). Status: 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:07:30 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000052000000F. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:07:30 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000010. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:07:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/628b2806-441e-4ad8-b442-61560adf18ad/) from URL group (0xFE00000220000010). Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:07:24 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Information 23/08/2025 20:07:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000052000000E). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 23/08/2025 20:07:22 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Warning 23/08/2025 20:07:22 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:19 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:18 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:18 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 20:07:18 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Information 23/08/2025 20:07:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000052000000E). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000020000032). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000020000032). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/81750250-0df0-4c1e-8585-5ffcb66d92ff/) to URL group (0xFF00000320000034). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000320000034. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0a5e62ba-a70c-4bd3-b95c-e607be792b50/) from URL group (0xFE00000020000013). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:07:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 23/08/2025 20:07:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\9ad8f1e5e5d5adfb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:07:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 20:07:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 5 keys and creating 1 modified pages. Warning 23/08/2025 20:06:59 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17768. Information 23/08/2025 20:06:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000012). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000012). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:41 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000011). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:41 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000011). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000420000028). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000420000028). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000012000000F). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:06:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000012000000F). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 20:06:23 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name ap-gue1.spotify.com timed out after none of the configured DNS servers responded. Client PID 8312. Warning 23/08/2025 20:05:43 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17768. Information 23/08/2025 20:05:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0a5e62ba-a70c-4bd3-b95c-e607be792b50/) to URL group (0xFE00000020000013). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:05:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:05:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/628b2806-441e-4ad8-b442-61560adf18ad/) to URL group (0xFE00000220000010). Status: 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:05:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000010. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:05:39 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name brdtest.com timed out after none of the configured DNS servers responded. Client PID 4520. Warning 23/08/2025 20:05:38 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21092. Information 23/08/2025 20:05:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:05:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1da4a88c-5c45-473f-bad4-5916416e3de0/) from URL group (0xFE00000720000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:05:37 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000009. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 20:05:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/920b4b83-480b-476e-9a65-efb8b21366bf/) from URL group (0xFE00000620000009). Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 23/08/2025 20:05:32 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name flow.logitech.io timed out after none of the configured DNS servers responded. Client PID 17768. Warning 23/08/2025 20:05:27 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name gfwsl.geforce.com timed out after none of the configured DNS servers responded. Client PID 21092. Information 23/08/2025 20:05:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000420000027). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000420000027). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000012). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000012). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000011). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000011). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:37 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000010). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000010). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000010). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000010). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000012000000E). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:04:23 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Warning 23/08/2025 20:04:06 disk 51 None An error was detected on device \Device\Harddisk1\DR12 during a paging operation. Information 23/08/2025 20:03:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000012000000E). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000F). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000F). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Error 23/08/2025 20:03:45 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Information 23/08/2025 20:03:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000F). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000F). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000E). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000E). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 20:03:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000001). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Error 23/08/2025 20:03:21 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Information 23/08/2025 20:03:22 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Warning 23/08/2025 20:02:36 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\00000135) was retried. Error 23/08/2025 20:02:16 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:02:13 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:02:10 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:02:07 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:02:05 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:02:02 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Error 23/08/2025 20:01:59 disk 7 None The device, \Device\Harddisk1\DR12, has a bad block. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Warning 23/08/2025 20:01:28 disk 51 None An error was detected on device \Device\Harddisk1\DR11 during a paging operation. Error 23/08/2025 20:01:26 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 20:01:23 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Information 23/08/2025 20:01:22 Virtual Disk Service 3 None Service started. Error 23/08/2025 20:01:20 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 20:01:17 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 20:00:54 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 20:00:31 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 20:00:08 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Information 23/08/2025 20:00:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 23/08/2025 19:59:44 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Warning 23/08/2025 19:59:41 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\00000126) was retried. Information 23/08/2025 19:59:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000001). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:59:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000001). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:59:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000001). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:59:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000E). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:59:25 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Error 23/08/2025 19:59:21 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:18 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:15 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:13 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:10 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:07 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:04 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:59:01 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:58 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:55 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:52 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:50 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:47 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:44 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:41 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:58:18 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Warning 23/08/2025 19:58:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 19:57:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 23/08/2025 19:57:11 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\00000126) was retried. Error 23/08/2025 19:56:51 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:48 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:45 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Information 23/08/2025 19:56:43 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 19:56:43 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Error 23/08/2025 19:56:43 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:40 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Information 23/08/2025 19:56:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 19:56:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000E). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:56:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000F). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:56:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000F). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Error 23/08/2025 19:56:37 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:34 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:31 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:28 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:25 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:56:22 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Information 23/08/2025 19:56:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000012000000D). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:56:18 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 19:55:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1da4a88c-5c45-473f-bad4-5916416e3de0/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:55:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:55:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/920b4b83-480b-476e-9a65-efb8b21366bf/) to URL group (0xFE00000620000009). Status: 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 19:55:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000009. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 19:55:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000012000000D). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:55:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000420000026). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:55:48 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000420000026). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 19:55:41 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name s07.upd.kaspersky.com timed out after none of the configured DNS servers responded. Client PID 4164. Information 23/08/2025 19:55:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000003. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 19:55:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/eb9f1706-508f-4d52-937b-d8e73493eca6/) from URL group (0xFE00000420000003). Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/08/2025 19:55:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:55:14 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Warning 23/08/2025 19:54:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 19:54:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 19:54:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:54:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000D). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:54:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000D). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:54:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 23/08/2025 19:53:37 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\00000126) was retried. Warning 23/08/2025 19:53:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 19:53:17 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\00000126) was retried. Error 23/08/2025 19:52:57 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:52:54 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:52:51 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:52:48 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:52:45 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Error 23/08/2025 19:52:42 disk 7 None The device, \Device\Harddisk1\DR11, has a bad block. Warning 23/08/2025 19:52:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 19:52:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 19:51:59 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/08/2025 19:51:57 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎23T13:32:01.457009200Z Wake Time: ‎2025‎-‎08‎-‎23T18:51:56.683502200Z Wake Source: Unknown" Warning 23/08/2025 19:51:57 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 23/08/2025 19:51:57 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE0000002000000C). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE0000002000000C). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE0000032000000E). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE0000032000000E). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000022000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE0000022000000D). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE0000022000000D). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000022000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC0000012000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC0000012000000C). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC0000012000000C). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC0000012000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000022000001E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFF0000022000001E). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFF0000022000001E). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000022000001E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 19:51:57 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 22 to 24. Reason Unknown BootId: 151" Information 23/08/2025 19:51:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 21 to 22. Reason SxTransition BootId: 151" Information 23/08/2025 19:51:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/08/2025 19:51:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/08/2025 19:51:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 23/08/2025 19:51:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/08/2025 19:51:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎23T18:51:54.500000000Z from ‎2025‎-‎08‎-‎23T13:32:05.532295800Z. Time Delta: 19188967 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎23T19:51:54.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/08/2025 14:32:05 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 23/08/2025 14:32:04 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 14:32:01 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 23/08/2025 14:32:01 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 20 to 21. Reason Unknown BootId: 151" Information 23/08/2025 14:32:01 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 23/08/2025 14:32:01 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 23/08/2025 14:31:59 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 23/08/2025 14:30:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 14:26:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 14:24:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 23/08/2025 14:18:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 14:12:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000005). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:12:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/08/2025 14:11:41 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 23/08/2025 14:10:37 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 14:10:37 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 23/08/2025 14:10:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 14:10:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000005). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000C). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000C). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:10:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000008). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 14:10:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 14:09:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000008). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000012000000B). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000012000000B). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000B). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000B). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000007). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000007). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000003). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000003). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000D). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000D). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000006). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000006). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:09:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000B). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000B). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000012000000A). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000012000000A). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD0000042000000B). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:42 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 23/08/2025 14:08:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD0000042000000B). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000520000001). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000520000001). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000A). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000A). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000A). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000A). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000C). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000C). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000009). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000009). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000009). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000009). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000008). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:08:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000008). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:07:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 23/08/2025 14:07:53 Service Control Manager 7045 None "A service was installed in the system. Service Name: Logi Options+ Service File Name: ""C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe"" --run-as-service Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 23/08/2025 14:07:41 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 23/08/2025 14:07:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 14:06:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 14:06:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 14:06:23 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/08/2025 14:06:21 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎23T10:59:52.314000700Z Wake Time: ‎2025‎-‎08‎-‎23T13:06:20.686029200Z Wake Source: Unknown" Warning 23/08/2025 14:06:21 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 23/08/2025 14:06:21 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE0000032000000B). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE0000032000000B). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC00000120000008). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC00000120000008). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC00000120000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC00000120000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD0000012000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFD0000012000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFD0000012000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD0000012000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE0000032000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE0000032000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 14:06:21 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 18 to 20. Reason Unknown BootId: 151" Information 23/08/2025 14:06:20 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 17 to 18. Reason SxTransition BootId: 151" Information 23/08/2025 14:06:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/08/2025 14:06:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/08/2025 14:06:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 23/08/2025 14:06:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/08/2025 14:06:18 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎23T13:06:18.500000000Z from ‎2025‎-‎08‎-‎23T10:59:55.036474900Z. Time Delta: 7583463 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎23T14:06:18.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/08/2025 11:59:55 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 23/08/2025 14:06:18 EventLog 6013 None The system uptime is 230242 seconds. Information 23/08/2025 11:59:54 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/08/2025 11:59:52 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 23/08/2025 11:59:52 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎23T10:59:52.355264800Z from ‎2025‎-‎08‎-‎23T10:59:52.355208300Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎23T11:59:52.355264800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/08/2025 11:59:52 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 23/08/2025 11:59:52 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 16 to 17. Reason Unknown BootId: 151" Information 23/08/2025 11:59:52 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 23/08/2025 11:59:51 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:50 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 23/08/2025 11:59:49 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:49 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 23/08/2025 11:59:48 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 23/08/2025 11:58:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 11:57:49 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/08/2025 11:57:49 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 23/08/2025 11:57:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 11:57:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000009). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:57:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 23/08/2025 11:56:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 11:55:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 23/08/2025 11:55:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000009). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:55:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000009). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:55:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000009). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:55:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 23/08/2025 11:54:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 11:54:35 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 23/08/2025 11:53:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/08/2025 11:53:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/08/2025 11:53:55 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/08/2025 11:53:53 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎22T17:53:35.360604900Z Wake Time: ‎2025‎-‎08‎-‎23T10:53:52.690327200Z Wake Source: Unknown" Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000020000008). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000020000008). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000320000008). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000320000008). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000220000011. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFF00000220000011). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFF00000220000011). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000220000011. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD0000042000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFD0000042000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFD0000042000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/08/2025 11:53:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD0000042000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/08/2025 11:53:53 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 23/08/2025 11:53:53 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 23/08/2025 11:53:53 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 14 to 16. Reason Unknown BootId: 151" Warning 23/08/2025 11:53:52 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 23/08/2025 11:53:52 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 13 to 14. Reason SxTransition BootId: 151" Information 23/08/2025 11:53:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/08/2025 11:53:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/08/2025 11:53:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 23/08/2025 11:53:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/08/2025 11:53:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎23T10:53:50.500000000Z from ‎2025‎-‎08‎-‎22T17:53:37.503760500Z. Time Delta: 61212996 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎23T11:53:50.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/08/2025 18:53:37 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 22/08/2025 18:53:37 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 22/08/2025 18:53:35 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 22/08/2025 18:53:35 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 12 to 13. Reason Unknown BootId: 151" Information 22/08/2025 18:53:35 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 22/08/2025 18:53:35 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 22/08/2025 18:53:33 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 22/08/2025 18:51:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 18:49:37 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 22/08/2025 18:49:37 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 22/08/2025 18:49:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 18:48:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 18:48:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 18:48:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 22/08/2025 18:48:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 18:47:49 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 22/08/2025 18:47:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 22/08/2025 18:47:47 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 22/08/2025 18:47:47 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 22/08/2025 18:47:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎22T17:47:32.336665100Z from ‎2025‎-‎08‎-‎22T17:47:32.336065200Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎22T18:47:32.336665100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/08/2025 18:47:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 22/08/2025 18:47:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎22T17:47:32.335363000Z from ‎2025‎-‎08‎-‎22T17:47:31.039169200Z. Time Delta: 1296 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎22T18:47:32.335363000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/08/2025 18:47:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 22/08/2025 18:47:15 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 22/08/2025 18:46:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 18:46:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 18:46:36 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 22/08/2025 18:46:33 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎22T08:17:58.171683500Z Wake Time: ‎2025‎-‎08‎-‎22T17:46:32.698619900Z Wake Source: Unknown" Warning 22/08/2025 18:46:33 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 22/08/2025 18:46:33 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 22/08/2025 18:46:33 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 151" Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000020000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000020000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000320000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000320000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000320000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000320000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000120000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFD00000120000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFD00000120000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 18:46:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000120000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 22/08/2025 18:46:32 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 22/08/2025 18:46:32 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 151" Information 22/08/2025 18:46:32 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 22/08/2025 18:46:32 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 22/08/2025 18:46:32 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 22/08/2025 18:46:32 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 22/08/2025 18:46:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎22T17:46:30.500000000Z from ‎2025‎-‎08‎-‎22T08:17:59.759644000Z. Time Delta: 34110740 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎22T18:46:30.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/08/2025 09:17:59 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 22/08/2025 18:46:30 EventLog 6013 None The system uptime is 160655 seconds. Information 22/08/2025 09:17:59 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 22/08/2025 09:17:58 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 22/08/2025 09:17:58 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎22T08:17:58.220893600Z from ‎2025‎-‎08‎-‎22T08:17:58.220644500Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎22T09:17:58.220893600Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/08/2025 09:17:58 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 22/08/2025 09:17:58 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 151" Information 22/08/2025 09:17:58 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 22/08/2025 09:17:57 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 22/08/2025 09:17:55 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Warning 22/08/2025 09:16:47 disk 51 None An error was detected on device \Device\Harddisk1\DR8 during a paging operation. Warning 22/08/2025 09:12:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 08:52:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:51:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/08/2025 08:49:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/08/2025 08:45:19 Virtual Disk Service 4 None Service stopped. Warning 22/08/2025 08:39:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 08:38:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:37:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/08/2025 08:35:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/08/2025 08:34:26 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&2#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 22/08/2025 08:34:26 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 22/08/2025 08:34:26 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 22/08/2025 08:34:26 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&2#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 22/08/2025 08:34:26 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 22/08/2025 08:34:26 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 22/08/2025 08:34:26 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Information 22/08/2025 08:34:26 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 22/08/2025 08:34:26 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 22/08/2025 08:34:25 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 22/08/2025 08:34:25 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 22/08/2025 08:34:25 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_PRO-READER&REV_0034#000000000034&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 22/08/2025 08:34:25 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Information 22/08/2025 08:34:25 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 22/08/2025 08:34:25 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 22/08/2025 08:34:25 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Warning 22/08/2025 08:34:22 disk 158 None Disk 3 has the same disk identifiers as one or more disks connected to the system. Go to Microsoft's support website (http://support.microsoft.com) and search for KB2983588 to resolve the issue. Warning 22/08/2025 08:34:22 disk 158 None Disk 2 has the same disk identifiers as one or more disks connected to the system. Go to Microsoft's support website (http://support.microsoft.com) and search for KB2983588 to resolve the issue. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Warning 22/08/2025 08:33:24 disk 51 None An error was detected on device \Device\Harddisk1\DR7 during a paging operation. Error 22/08/2025 08:32:08 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Warning 22/08/2025 08:32:05 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000df) was retried. Warning 22/08/2025 08:31:44 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000df) was retried. Error 22/08/2025 08:31:24 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Error 22/08/2025 08:31:21 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Error 22/08/2025 08:31:18 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Error 22/08/2025 08:31:16 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Error 22/08/2025 08:31:13 disk 7 None The device, \Device\Harddisk1\DR6, has a bad block. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:31:04 disk 51 None An error was detected on device \Device\Harddisk1\DR5 during a paging operation. Warning 22/08/2025 08:29:40 disk 51 None An error was detected on device \Device\Harddisk1\DR4 during a paging operation. Warning 22/08/2025 08:29:40 disk 51 None An error was detected on device \Device\Harddisk1\DR4 during a paging operation. Warning 22/08/2025 08:29:40 disk 51 None An error was detected on device \Device\Harddisk1\DR4 during a paging operation. Warning 22/08/2025 08:29:40 disk 51 None An error was detected on device \Device\Harddisk1\DR4 during a paging operation. Error 22/08/2025 08:29:27 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 22/08/2025 08:29:18 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\000000d3) was retried. Information 22/08/2025 08:29:08 Virtual Disk Service 3 None Service started. Warning 22/08/2025 08:29:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:27:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 22/08/2025 08:21:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000005). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:21:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/08/2025 08:20:42 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 22/08/2025 08:20:42 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 22/08/2025 08:20:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 08:19:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:19:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000009). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000009). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000005). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000005). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000008). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000008). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 22/08/2025 08:19:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:19:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:19:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000007). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:18:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000007). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:18:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 22/08/2025 08:18:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:17:33 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 22/08/2025 08:16:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/08/2025 08:16:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/08/2025 08:16:56 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 22/08/2025 08:16:51 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎21T20:03:34.201919300Z Wake Time: ‎2025‎-‎08‎-‎22T07:16:50.684326900Z Wake Source: Unknown" Warning 22/08/2025 08:16:51 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 22/08/2025 08:16:51 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 22/08/2025 08:16:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 151" Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000005). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000004). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC00000120000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC00000120000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC00000120000005). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC00000120000005). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000320000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/08/2025 08:16:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 22/08/2025 08:16:50 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 22/08/2025 08:16:50 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 151" Information 22/08/2025 08:16:50 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 22/08/2025 08:16:50 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 22/08/2025 08:16:50 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 22/08/2025 08:16:50 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 22/08/2025 08:16:48 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎22T07:16:48.500000000Z from ‎2025‎-‎08‎-‎21T20:03:36.285697700Z. Time Delta: 40392214 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎22T08:16:48.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/08/2025 21:03:36 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 22/08/2025 08:16:48 Virtual Disk Service 4 None Service stopped. Information 21/08/2025 21:03:35 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 21/08/2025 21:03:34 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 21/08/2025 21:03:34 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 151" Information 21/08/2025 21:03:34 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 21/08/2025 21:03:33 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 21/08/2025 21:03:32 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Warning 21/08/2025 21:01:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/08/2025 20:58:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/08/2025 20:58:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:52:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 21/08/2025 20:50:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 21/08/2025 20:48:54 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 21/08/2025 20:47:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 21/08/2025 20:47:09 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NHT9RB2F4HD-Microsoft.Copilot. Information 21/08/2025 20:47:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 21/08/2025 20:47:09 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Error 21/08/2025 20:47:03 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NHT9RB2F4HD-Microsoft.Copilot. Information 21/08/2025 20:47:02 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 21/08/2025 20:47:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 21/08/2025 20:46:41 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 21/08/2025 20:36:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:36:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 21/08/2025 20:34:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000006). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000006). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000006). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000006). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:34:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000005). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000005). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000003). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000003). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000003). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000003). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000420000002). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000420000002). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000005). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000005). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000004). Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:33:20 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 21/08/2025 20:33:20 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 21/08/2025 20:33:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x355C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 21/08/2025 20:33:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:33:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 21/08/2025 20:32:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/08/2025 20:32:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:31:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 21 keys and creating 8 modified pages. Information 21/08/2025 20:31:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\c734854775b982fd_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 21/08/2025 20:31:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 5 modified pages. Information 21/08/2025 20:31:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 2 modified pages. Information 21/08/2025 20:31:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎21T19:31:50.666753300Z from ‎2025‎-‎08‎-‎21T19:31:50.666096300Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎21T20:31:50.666753300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/08/2025 20:31:50 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 21/08/2025 20:31:50 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 21/08/2025 20:31:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎21T19:31:50.665270900Z from ‎2025‎-‎08‎-‎21T19:31:48.122691100Z. Time Delta: 2542 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 19680). RTC time: ‎2025‎-‎08‎-‎21T20:31:50.665270900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/08/2025 20:31:50 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Warning 21/08/2025 20:31:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:31:32 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 21/08/2025 20:30:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/08/2025 20:30:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/08/2025 20:30:52 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 21/08/2025 20:30:50 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎20T21:32:37.900622100Z Wake Time: ‎2025‎-‎08‎-‎21T19:30:49.683609000Z Wake Source: Unknown" Warning 21/08/2025 20:30:50 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 21/08/2025 20:30:50 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 21/08/2025 20:30:50 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 151" Information 21/08/2025 20:30:50 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000002). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000220000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFC00000120000002). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFC00000120000002). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000020000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFE00000020000002). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD00000420000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) from URL group (0xFD00000420000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/08/2025 20:30:49 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 21/08/2025 20:30:49 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 21/08/2025 20:30:49 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 151" Information 21/08/2025 20:30:49 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 21/08/2025 20:30:49 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 21/08/2025 20:30:49 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 21/08/2025 20:30:49 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 21/08/2025 20:30:47 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎21T19:30:47.500000000Z from ‎2025‎-‎08‎-‎20T21:32:38.924878200Z. Time Delta: 79088575 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎21T20:30:47.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 20/08/2025 22:32:38 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 21/08/2025 20:30:47 EventLog 6013 None The system uptime is 80515 seconds. Information 20/08/2025 22:32:38 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 20/08/2025 22:32:38 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 20/08/2025 22:32:37 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 151" Information 20/08/2025 22:32:37 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 20/08/2025 22:32:37 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:36 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 20/08/2025 22:32:35 winsrvext 100 None Process C:\Windows\System32\mmc.exe is delaying system shutdown after 8109 milliseconds. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:35 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:34 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:33 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:32 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 20/08/2025 22:32:31 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:29 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:28 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:28 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:27 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 20/08/2025 22:32:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Information 20/08/2025 22:32:23 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Error 20/08/2025 22:32:23 VDS Basic Provider 1 None Unexpected failure. Error code: 1B1@01010013 Warning 20/08/2025 22:32:22 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b7) was retried. Error 20/08/2025 22:32:02 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:59 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:56 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:53 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:50 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:47 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:44 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:41 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:38 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:36 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:33 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:30 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:27 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:24 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:21 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:18 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:15 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:12 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:09 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:06 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:03 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:31:00 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Information 20/08/2025 22:29:09 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 20/08/2025 22:28:13 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Warning 20/08/2025 22:28:10 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b7) was retried. Warning 20/08/2025 22:27:49 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b7) was retried. Error 20/08/2025 22:27:29 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:27:26 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:27:23 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:27:20 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Error 20/08/2025 22:27:18 disk 7 None The device, \Device\Harddisk1\DR3, has a bad block. Warning 20/08/2025 22:26:57 disk 51 None An error was detected on device \Device\Harddisk1\DR2 during a paging operation. Warning 20/08/2025 22:26:57 disk 51 None An error was detected on device \Device\Harddisk1\DR2 during a paging operation. Warning 20/08/2025 22:26:57 disk 51 None An error was detected on device \Device\Harddisk1\DR2 during a paging operation. Warning 20/08/2025 22:26:57 disk 51 None An error was detected on device \Device\Harddisk1\DR2 during a paging operation. Warning 20/08/2025 22:26:57 disk 51 None An error was detected on device \Device\Harddisk1\DR2 during a paging operation. Error 20/08/2025 22:25:49 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:25:15 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Warning 20/08/2025 22:25:12 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b1) was retried. Warning 20/08/2025 22:24:51 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b1) was retried. Error 20/08/2025 22:24:31 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:28 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:26 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:23 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:20 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:17 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:14 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:11 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:08 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:06 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:03 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:24:00 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:57 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:54 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:51 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:48 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:45 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:43 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:40 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:37 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:34 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:31 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:28 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:23:05 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Warning 20/08/2025 22:21:59 disk 153 None The IO operation at logical block address 0x5c0818 for Disk 1 (PDO name: \Device\000000b1) was retried. Error 20/08/2025 22:21:38 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:21:36 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:21:33 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:21:30 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:21:27 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Warning 20/08/2025 22:21:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 22:21:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 20/08/2025 22:12:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 20/08/2025 22:12:32 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:12:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:12:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:11:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:11:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 22:11:49 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:21 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:11:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 22:11:09 Virtual Disk Service 3 None Service started. Warning 20/08/2025 22:11:03 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 20/08/2025 22:10:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 20/08/2025 22:10:43 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 22:10:35 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:10:05 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Information 20/08/2025 22:09:47 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/6ff74829-bbf2-4154-838a-11c94e513971/) to URL group (0xFD00000420000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD00000420000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/700a380b-55f7-49b9-bf51-2cec81a75110/) from URL group (0xFE00000320000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/eb9f1706-508f-4d52-937b-d8e73493eca6/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000003. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:09:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/db58a88e-fcec-4081-bb84-4282e52fa3e7/) from URL group (0xFC00000120000001). Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/700a380b-55f7-49b9-bf51-2cec81a75110/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9d44558d-35a1-499e-83b8-994eadb108fd/) from URL group (0xFE00000020000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9d44558d-35a1-499e-83b8-994eadb108fd/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:18 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/db58a88e-fcec-4081-bb84-4282e52fa3e7/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:09:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0xDE8 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 20/08/2025 22:09:16 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:09:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:09:16 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:09:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:09:16 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 22:09:15 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 20/08/2025 22:09:15 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 20/08/2025 22:09:15 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Warning 20/08/2025 22:09:09 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 22:09:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 20/08/2025 22:09:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:09:04 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 20/08/2025 22:09:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 22:09:04 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 20/08/2025 22:09:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:04 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:03 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:09:03 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 20/08/2025 22:09:03 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 20/08/2025 22:09:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 20/08/2025 22:09:03 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 20/08/2025 22:09:02 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 20/08/2025 22:09:02 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 20/08/2025 22:09:02 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 20/08/2025 22:09:02 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 20/08/2025 22:09:02 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 20/08/2025 22:08:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 20/08/2025 22:08:55 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 20/08/2025 22:08:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:08:54 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 20/08/2025 22:08:54 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:54 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:53 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 20/08/2025 22:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:08:52 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 20/08/2025 22:09:04 EventLog 6013 None The system uptime is 12 seconds. Information 20/08/2025 22:09:04 EventLog 6005 None The Event log service was started. Information 20/08/2025 22:09:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Error 20/08/2025 22:09:04 EventLog 6008 None The previous system shutdown at 10:01:17 PM on ‎8/‎20/‎2025 was unexpected. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎20T21:08:52.500000000Z. Loader time: ‎2025‎-‎08‎-‎20T21:08:52.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 20/08/2025 22:08:52 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎20T21:08:52.500000000Z. Warning 20/08/2025 22:06:53 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\000000b1) was retried. Error 20/08/2025 22:06:45 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:06:32 disk 7 None The device, \Device\Harddisk1\DR2, has a bad block. Error 20/08/2025 22:06:15 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:05:45 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:05:15 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Information 20/08/2025 22:05:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 20/08/2025 22:05:05 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\000000b1) was retried. Information 20/08/2025 22:04:46 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:04:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 51 None An error was detected on device \Device\Harddisk1\DR1 during a paging operation. Warning 20/08/2025 22:04:37 disk 153 None The IO operation at logical block address 0x5c0798 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 22:04:34 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 20/08/2025 22:04:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 20/08/2025 22:04:04 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:04:03 Microsoft-Windows-DistributedCOM 10010 None The server {283EDD52-69B2-473D-BEB6-2C0B4C01FD73} did not register with DCOM within the required timeout. Information 20/08/2025 22:04:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 20/08/2025 22:03:57 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 22:03:36 disk 153 None The IO operation at logical block address 0x5c0798 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 22:03:34 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 20/08/2025 22:03:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:03:16 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 20/08/2025 22:03:09 Virtual Disk Service 3 None Service started. Information 20/08/2025 22:03:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 20/08/2025 22:02:57 Service Control Manager 7031 None The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error 20/08/2025 22:02:57 Service Control Manager 7023 None "The Windows Search service terminated with the following error: The system cannot find the drive specified." Error 20/08/2025 22:02:56 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 22:02:48 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Error 20/08/2025 22:02:18 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Information 20/08/2025 22:01:59 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/62c8d854-a48c-46fe-bde6-8b428adc9043/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/10879e44-6875-4ea9-a9af-2e422cc9f832/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5ce80116-7498-4942-bc1e-3c34eb647896/) from URL group (0xFE00000120000001). Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000620000001. Status 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0833e80f-d4b0-492c-a3ec-ef555597d8e6/) from URL group (0xFC00000620000001). Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 20/08/2025 22:01:28 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5ce80116-7498-4942-bc1e-3c34eb647896/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/631edc04-86b2-4dbc-a547-4c04aaa3e43e/) from URL group (0xFE00000220000001). Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0833e80f-d4b0-492c-a3ec-ef555597d8e6/) to URL group (0xFC00000620000001). Status: 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000620000001. Status 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/15881703-5526-491d-b5dc-376e9d7f8b0e/) from URL group (0xFE00000520000001). Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/631edc04-86b2-4dbc-a547-4c04aaa3e43e/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:27 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x7CC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 20/08/2025 22:01:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 22:01:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 22:01:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/15881703-5526-491d-b5dc-376e9d7f8b0e/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 22:01:26 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xD50 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 20/08/2025 22:01:25 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 20/08/2025 22:01:25 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 20/08/2025 22:01:25 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Warning 20/08/2025 22:01:22 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 22:01:21 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 20/08/2025 22:01:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xECC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xECC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 22:01:17 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 20/08/2025 22:01:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 22:01:16 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 20/08/2025 22:01:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:16 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:15 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 20/08/2025 22:01:15 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 20/08/2025 22:01:15 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 20/08/2025 22:01:15 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 20/08/2025 22:01:15 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 20/08/2025 22:01:15 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 20/08/2025 22:01:15 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 20/08/2025 22:01:15 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 20/08/2025 22:01:15 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 20/08/2025 22:01:08 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 20/08/2025 22:01:07 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 20/08/2025 22:01:07 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 20/08/2025 22:01:07 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 22:01:06 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 20/08/2025 22:01:06 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:06 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:06 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 20/08/2025 22:01:05 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:05 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:05 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:05 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 22:01:04 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 20/08/2025 22:01:17 EventLog 6013 None The system uptime is 13 seconds. Information 20/08/2025 22:01:17 EventLog 6005 None The Event log service was started. Information 20/08/2025 22:01:17 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Error 20/08/2025 22:01:17 EventLog 6008 None The previous system shutdown at 9:54:04 PM on ‎8/‎20/‎2025 was unexpected. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎20T21:01:04.500000000Z. Loader time: ‎2025‎-‎08‎-‎20T21:01:03.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 20/08/2025 22:01:04 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎20T21:01:04.500000000Z. Warning 20/08/2025 21:59:51 winsrvext 100 None Process C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe is delaying system shutdown after 7281 milliseconds. Error 20/08/2025 21:59:49 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 20/08/2025 21:59:48 winsrvext 100 None Process C:\Windows\System32\SecurityHealthSystray.exe is delaying system shutdown after 5015 milliseconds. Warning 20/08/2025 21:59:48 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 20/08/2025 21:59:43 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the restart of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Warning 20/08/2025 21:58:18 disk 153 None The IO operation at logical block address 0x5c0798 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:57:58 disk 153 None The IO operation at logical block address 0x5c0798 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 21:57:52 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. Warning 20/08/2025 21:57:37 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:57:17 disk 153 None The IO operation at logical block address 0x5bf398 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 21:56:57 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:56:54 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Information 20/08/2025 21:56:53 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 21:56:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:56:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 20/08/2025 21:56:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_d9ma7nkbkv4rp\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\47b86fda953346a8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 20/08/2025 21:56:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 21:56:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:56:16 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 20/08/2025 21:56:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:55:56 Virtual Disk Service 3 None Service started. Information 20/08/2025 21:55:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e59fd33af7a9be35_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 20/08/2025 21:55:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 20/08/2025 21:55:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 4 keys and creating 1 modified pages. Warning 20/08/2025 21:55:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:54:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/930ee074-a7ee-4696-a7d5-140af358e360/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/c3115489-d006-47e8-a737-06315b2ee034/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000002. Status 0x0. Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/89c0b150-3af5-48b7-b76c-f1b89fbad163/) from URL group (0xFE00000320000001). Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/c3f06cbe-3298-41c4-a867-a6d57fb41a28/) from URL group (0xFE00000220000001). Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 20/08/2025 21:54:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 21:54:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:54:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 3616 keys and creating 1196 modified pages. Information 20/08/2025 21:54:15 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 20/08/2025 21:54:10 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 21:54:09 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 20/08/2025 21:54:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/c3f06cbe-3298-41c4-a867-a6d57fb41a28/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:07 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xF40 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/89c0b150-3af5-48b7-b76c-f1b89fbad163/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:06 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/30fe46be-8828-4d09-9055-f9e25598375c/) from URL group (0xFE00000720000001). Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFC00000720000001). Status: 0x0. Process Id 0x1020 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000720000001. Status 0x0. Process Id 0x1020 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat was cleared updating 64 keys and creating 10 modified pages. Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/30fe46be-8828-4d09-9055-f9e25598375c/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x7A4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 20/08/2025 21:54:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Warning 20/08/2025 21:54:04 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Information 20/08/2025 21:54:04 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Warning 20/08/2025 21:54:04 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 20/08/2025 21:54:04 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 20/08/2025 21:54:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 21:54:04 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 20/08/2025 21:54:04 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 20/08/2025 21:54:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:54:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 222 keys and creating 21 modified pages. Information 20/08/2025 21:54:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 303 keys and creating 70 modified pages. Information 20/08/2025 21:54:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 234 keys and creating 20 modified pages. Information 20/08/2025 21:54:03 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 20/08/2025 21:54:03 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 20/08/2025 21:54:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 20/08/2025 21:54:03 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 20/08/2025 21:54:03 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 20/08/2025 21:54:03 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 20/08/2025 21:54:03 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 20/08/2025 21:54:03 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 20/08/2025 21:54:03 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 20/08/2025 21:53:55 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 20/08/2025 21:53:55 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 142524416 bytes and an ending size of 132427776 bytes. Information 20/08/2025 21:53:52 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 20/08/2025 21:53:52 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 20/08/2025 21:53:52 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 933 keys and creating 138 modified pages. Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 71 keys and creating 9 modified pages. Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 89 keys and creating 5 modified pages. Information 20/08/2025 21:53:52 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 20/08/2025 21:53:52 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Warning 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:51 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:53:50 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎20T20:53:49.500000000Z. Loader time: ‎2025‎-‎08‎-‎20T20:53:48.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 20/08/2025 21:53:50 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎20T20:53:49.500000000Z. Information 20/08/2025 21:53:05 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎20T20:53:05.258610500Z. Information 20/08/2025 21:53:04 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 20/08/2025 21:52:59 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000520000001). Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000006. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:52:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) from URL group (0xFE00000620000001). Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 20/08/2025 21:54:04 EventLog 6013 None The system uptime is 15 seconds. Information 20/08/2025 21:54:04 EventLog 6005 None The Event log service was started. Information 20/08/2025 21:54:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 20/08/2025 21:52:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 20/08/2025 21:52:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 20/08/2025 21:52:54 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 20/08/2025 21:52:54 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 20/08/2025 21:52:54 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 20/08/2025 21:52:54 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 20/08/2025 21:52:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎20T20:52:54.809690800Z from ‎2025‎-‎08‎-‎20T20:52:54.794525400Z. Time Delta: 15 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎20T21:52:54.809690800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 20/08/2025 21:52:54 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 20/08/2025 21:52:54 EventLog 6006 None The Event log service was stopped. Information 20/08/2025 21:52:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 20/08/2025 21:52:47 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 20/08/2025 21:51:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 20/08/2025 21:50:28 disk 153 None The IO operation at logical block address 0x71c45c68 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 20/08/2025 21:49:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 20/08/2025 21:48:43 disk 153 None The IO operation at logical block address 0x4e093380 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:48:21 disk 153 None The IO operation at logical block address 0x4e092b80 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:46:37 disk 153 None The IO operation at logical block address 0x71c45c68 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:46:14 disk 153 None The IO operation at logical block address 0x4e092b80 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 21:45:50 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:45:48 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Warning 20/08/2025 21:44:19 disk 153 None The IO operation at logical block address 0x71c45468 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:42:51 disk 153 None The IO operation at logical block address 0x71c45c68 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:42:28 disk 153 None The IO operation at logical block address 0x5daa1100 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 20/08/2025 21:42:02 disk 153 None The IO operation at logical block address 0x529f7600 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 20/08/2025 21:41:03 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:41:00 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:58 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:55 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:52 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:49 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:46 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Error 20/08/2025 21:40:44 disk 7 None The device, \Device\Harddisk1\DR1, has a bad block. Information 20/08/2025 21:36:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 20/08/2025 21:34:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 20/08/2025 21:33:45 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 20/08/2025 21:33:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 20/08/2025 21:33:42 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 20/08/2025 21:33:42 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy20) is healthy. No action is needed. Information 20/08/2025 21:33:21 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PC1H9VN18CM-Microsoft.StartExperiencesApp Information 20/08/2025 21:33:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 20/08/2025 21:33:18 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PC1H9VN18CM-Microsoft.StartExperiencesApp Information 20/08/2025 21:33:18 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy19) is healthy. No action is needed. Information 20/08/2025 21:33:11 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 20/08/2025 21:32:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2508.43121.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 20/08/2025 21:32:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.92.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 20/08/2025 21:32:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 20/08/2025 21:32:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 20/08/2025 21:27:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000009). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:27:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 20/08/2025 21:26:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy18) is healthy. No action is needed. Information 20/08/2025 21:25:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000009). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000003). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000003). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000A). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000A). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000009). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000009). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000009). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000009). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000008). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000008). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:25:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000008). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000008). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000012000000A). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000012000000A). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000007). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000007). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000001). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000001). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000007). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000007). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:24:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000009). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 20/08/2025 21:24:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 21:23:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:23:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000009). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:23:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000007). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:23:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000007). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:23:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000008). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000008). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000006). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000006). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000005). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 20/08/2025 21:22:55 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 20/08/2025 21:22:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000005). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000005). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000005). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:22:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 20/08/2025 21:19:49 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 20/08/2025 21:19:49 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 20/08/2025 21:19:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 21:19:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:17:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎20T20:17:41.272276400Z from ‎2025‎-‎08‎-‎20T20:17:41.271601700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎20T21:17:41.272276400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 20/08/2025 21:17:41 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 20/08/2025 21:17:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎20T20:17:41.269598500Z from ‎2025‎-‎08‎-‎20T20:17:38.072128800Z. Time Delta: 3197 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎20T21:17:41.269598500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 20/08/2025 21:17:41 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Warning 20/08/2025 21:17:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:17:22 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 20/08/2025 21:16:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 20/08/2025 21:16:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 20/08/2025 21:16:42 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 20/08/2025 21:16:40 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎19T19:47:00.951862900Z Wake Time: ‎2025‎-‎08‎-‎20T20:16:39.690988500Z Wake Source: Unknown" Warning 20/08/2025 21:16:40 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 20/08/2025 21:16:40 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 20/08/2025 21:16:40 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 22 to 24. Reason Unknown BootId: 148" Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000008. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000008). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000008). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000008. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000007. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000320000007). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000320000007). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000007. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000006). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000006). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000005). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000005). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000007. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000007). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000007). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 20/08/2025 21:16:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000007. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 20/08/2025 21:16:39 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 20/08/2025 21:16:39 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 21 to 22. Reason SxTransition BootId: 148" Information 20/08/2025 21:16:39 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 20/08/2025 21:16:39 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 20/08/2025 21:16:39 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 20/08/2025 21:16:39 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 20/08/2025 21:16:37 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎20T20:16:37.500000000Z from ‎2025‎-‎08‎-‎19T19:47:02.247008700Z. Time Delta: 88175252 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎20T21:16:37.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 20:47:02 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 20/08/2025 21:16:37 EventLog 6013 None The system uptime is 273241 seconds. Information 19/08/2025 20:47:01 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 19/08/2025 20:47:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T19:47:00.991767300Z from ‎2025‎-‎08‎-‎19T19:47:00.991069700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎19T20:47:00.991767300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 20:47:00 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 19/08/2025 20:47:01 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 19/08/2025 20:47:00 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 20 to 21. Reason Unknown BootId: 148" Information 19/08/2025 20:47:00 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 19/08/2025 20:47:00 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 19/08/2025 20:46:58 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 19/08/2025 20:46:58 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Warning 19/08/2025 20:24:50 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Information 19/08/2025 20:18:55 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 19/08/2025 20:18:52 Service Control Manager 7040 None The start type of the Auto Time Zone Updater service was changed from disabled to demand start. Information 19/08/2025 20:18:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 19/08/2025 20:10:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 19/08/2025 20:08:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 19/08/2025 20:05:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 19/08/2025 20:05:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 19/08/2025 20:05:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) from URL group (0xFE00000220000006). Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 19/08/2025 20:04:30 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Warning 19/08/2025 20:03:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 19:59:01 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Warning 19/08/2025 19:58:58 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Warning 19/08/2025 19:58:40 Microsoft-Windows-EnhancedPhishingProtection-Events 8265 None Aggregated Threat assessment of current system instance Warning 19/08/2025 19:56:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 19:55:18 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Information 19/08/2025 19:55:18 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 19/08/2025 19:53:08 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 19/08/2025 19:53:08 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 19/08/2025 19:53:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 19:52:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 19:52:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 19:51:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/08/2025 19:51:19 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 19/08/2025 19:51:19 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 19/08/2025 19:51:19 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#A&198B832A&0&000A27001E97274C&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 19/08/2025 19:51:19 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 19/08/2025 19:51:19 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded. It requires framework version 2.35.0 or higher. Information 19/08/2025 19:51:19 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.35.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#A&198B832A&0&000A27001E97274C&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 19/08/2025 19:51:19 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Warning 19/08/2025 19:51:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 19:51:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 19:51:14 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 19/08/2025 19:51:12 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎19T17:40:32.471035000Z Wake Time: ‎2025‎-‎08‎-‎19T18:51:11.685716000Z Wake Source: Unknown" Warning 19/08/2025 19:51:12 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 19/08/2025 19:51:12 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 19/08/2025 19:51:12 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 18 to 20. Reason Unknown BootId: 148" Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000006). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000006). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000005). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000003). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000003). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000720000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000720000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 19:51:11 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 17 to 18. Reason SxTransition BootId: 148" Information 19/08/2025 19:51:11 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 19/08/2025 19:51:11 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 19/08/2025 19:51:11 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 19/08/2025 19:51:11 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 19/08/2025 19:51:09 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T18:51:09.500000000Z from ‎2025‎-‎08‎-‎19T17:40:35.525358000Z. Time Delta: 4233974 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎19T19:51:09.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 18:40:35 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 19/08/2025 18:40:35 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 19/08/2025 18:40:32 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 19/08/2025 18:40:32 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 16 to 17. Reason Unknown BootId: 148" Information 19/08/2025 18:40:32 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 19/08/2025 18:40:32 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 19/08/2025 18:40:30 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 19/08/2025 18:40:30 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Warning 19/08/2025 18:38:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 18:30:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 19/08/2025 18:30:38 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 19/08/2025 18:28:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 18:28:28 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 19/08/2025 18:28:28 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 19/08/2025 18:28:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 18:27:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 18:26:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 18:26:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 18:26:42 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 19/08/2025 18:26:40 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎19T14:16:33.912345700Z Wake Time: ‎2025‎-‎08‎-‎19T17:26:39.689026600Z Wake Source: Unknown" Warning 19/08/2025 18:26:40 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 19/08/2025 18:26:40 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 19/08/2025 18:26:40 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 14 to 16. Reason Unknown BootId: 148" Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000720000003). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000320000006). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000320000006). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000002). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000002). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000220000001). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000220000001). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 18:26:39 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 13 to 14. Reason SxTransition BootId: 148" Information 19/08/2025 18:26:39 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 19/08/2025 18:26:39 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 19/08/2025 18:26:39 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 19/08/2025 18:26:39 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 19/08/2025 18:26:37 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T17:26:37.500000000Z from ‎2025‎-‎08‎-‎19T14:16:36.185805300Z. Time Delta: 11401314 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎19T18:26:37.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 15:16:36 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 19/08/2025 15:16:35 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 19/08/2025 15:16:34 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 19/08/2025 15:16:33 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 12 to 13. Reason Unknown BootId: 148" Information 19/08/2025 15:16:33 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 19/08/2025 15:16:33 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 19/08/2025 15:16:32 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 19/08/2025 15:16:32 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 19/08/2025 15:14:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) to URL group (0xFE00000220000006). Status: 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 19/08/2025 15:14:00 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000006. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 19/08/2025 15:14:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) from URL group (0xFE00000020000001). Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 19/08/2025 15:09:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 15:08:01 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 19/08/2025 15:08:01 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 19/08/2025 15:06:13 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 19/08/2025 15:06:13 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 19/08/2025 15:06:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 15:05:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 15:05:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 15:04:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 15:04:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 19/08/2025 15:03:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 15:03:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 15:03:50 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 19/08/2025 15:03:48 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎19T12:45:27.719433200Z Wake Time: ‎2025‎-‎08‎-‎19T14:03:47.686554600Z Wake Source: Unknown" Warning 19/08/2025 15:03:48 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 19/08/2025 15:03:48 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 19/08/2025 15:03:48 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 148" Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000003). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000320000005). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000320000005). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000220000005). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000002). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000320000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000320000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 15:03:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 19/08/2025 15:03:47 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 148" Information 19/08/2025 15:03:47 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 19/08/2025 15:03:47 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 19/08/2025 15:03:47 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 19/08/2025 15:03:47 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 19/08/2025 15:03:45 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T14:03:45.500000000Z from ‎2025‎-‎08‎-‎19T12:45:30.218663100Z. Time Delta: 4695281 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎19T15:03:45.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 13:45:30 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 19/08/2025 13:45:29 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 19/08/2025 13:45:27 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 19/08/2025 13:45:27 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 148" Information 19/08/2025 13:45:27 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 19/08/2025 13:45:27 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 19/08/2025 13:45:26 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 19/08/2025 13:45:26 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Warning 19/08/2025 13:44:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 13:43:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 19/08/2025 13:41:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 13:41:51 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 19/08/2025 13:39:54 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 19/08/2025 13:39:54 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 19/08/2025 13:39:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 13:39:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 10 keys and creating 1 modified pages. Information 19/08/2025 13:39:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 14 keys and creating 3 modified pages. Information 19/08/2025 13:39:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 16 keys and creating 3 modified pages. Information 19/08/2025 13:39:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 9 keys and creating 2 modified pages. Information 19/08/2025 13:39:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/08/2025 13:39:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/08/2025 13:39:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/08/2025 13:39:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Warning 19/08/2025 13:39:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 13:38:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 19/08/2025 13:38:38 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 19/08/2025 13:38:37 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Information 19/08/2025 13:38:37 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Error 19/08/2025 13:38:34 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 19/08/2025 13:38:33 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Information 19/08/2025 13:38:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/08/2025 13:38:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25072.63.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 19/08/2025 13:38:07 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 19/08/2025 13:37:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 13:37:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T12:37:40.655991300Z from ‎2025‎-‎08‎-‎19T12:37:40.655332500Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎19T13:37:40.655991300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 13:37:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 19/08/2025 13:37:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T12:37:40.654644800Z from ‎2025‎-‎08‎-‎19T12:37:39.081227400Z. Time Delta: 1573 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎19T13:37:40.654644800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/08/2025 13:37:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 19/08/2025 13:37:23 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 19/08/2025 13:36:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/08/2025 13:36:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/08/2025 13:36:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 19/08/2025 13:36:41 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎18T19:24:55.648876200Z Wake Time: ‎2025‎-‎08‎-‎19T12:36:40.690526200Z Wake Source: Unknown" Warning 19/08/2025 13:36:41 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 19/08/2025 13:36:41 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 19/08/2025 13:36:41 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 148" Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000020000005). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000020000005). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000005. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000022000000B. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFF0000022000000B). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFF0000022000000B). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000022000000B. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000220000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000020000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000020000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000020000003). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000020000003). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/08/2025 13:36:40 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 19/08/2025 13:36:40 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 19/08/2025 13:36:40 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 148" Information 19/08/2025 13:36:40 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 19/08/2025 13:36:40 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 19/08/2025 13:36:40 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 19/08/2025 13:36:40 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 19/08/2025 13:36:38 EventLog 6013 None The system uptime is 159244 seconds. Information 19/08/2025 13:36:38 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎19T12:36:38.500000000Z from ‎2025‎-‎08‎-‎18T19:24:58.035946300Z. Time Delta: 61900464 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎19T13:36:38.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 18/08/2025 20:24:58 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 18/08/2025 20:24:57 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 18/08/2025 20:24:55 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Error 18/08/2025 20:24:55 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.197.0_x64__cw5n1h2txyewy!Global.DesktopSpotlight.AppX1ay99xhphzbwzv134qx0tx5qnb6t98qf.mca did not register with DCOM within the required timeout. Error 18/08/2025 20:24:55 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.197.0_x64__cw5n1h2txyewy!Global.Accounts.AppXczw5m0gs1v24mkf1zqkkpebvayhcn73d.mca did not register with DCOM within the required timeout. Error 18/08/2025 20:24:55 Microsoft-Windows-DistributedCOM 10010 None The server MicrosoftWindows.Client.CBS_1000.26100.197.0_x64__cw5n1h2txyewy!Global.IrisService.AppX9vt1fs6dqgjpa4d1gsrdvr2kg9rrqk5d.mca did not register with DCOM within the required timeout. Information 18/08/2025 20:24:55 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 148" Information 18/08/2025 20:24:55 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 18/08/2025 20:24:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 18/08/2025 20:24:53 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 18/08/2025 20:24:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\cdb62c5d8f4fcab0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 18/08/2025 20:24:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 18/08/2025 20:24:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 18/08/2025 20:22:53 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 18/08/2025 20:22:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 18/08/2025 20:20:52 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 18/08/2025 20:20:52 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 18/08/2025 20:20:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 18/08/2025 20:20:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 18/08/2025 20:18:59 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎18T19:18:59.723610700Z from ‎2025‎-‎08‎-‎18T19:18:59.723501600Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎18T20:18:59.723610700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 18/08/2025 20:18:59 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 18/08/2025 20:18:59 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 18/08/2025 20:18:59 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎18T19:18:59.720193500Z from ‎2025‎-‎08‎-‎18T19:18:55.074677500Z. Time Delta: 4645 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 3248). RTC time: ‎2025‎-‎08‎-‎18T20:18:59.720193500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 18/08/2025 20:18:59 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 18/08/2025 20:18:40 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was reorganized with a starting size of 11325440 bytes and an ending size of 10973184 bytes. Information 18/08/2025 20:18:39 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 18/08/2025 20:18:18 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 61812736 bytes and an ending size of 59473920 bytes. Warning 18/08/2025 20:18:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 18/08/2025 20:18:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 18/08/2025 20:17:59 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 18/08/2025 20:17:57 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎17T16:57:24.108241600Z Wake Time: ‎2025‎-‎08‎-‎18T19:17:56.680809700Z Wake Source: Unknown" Warning 18/08/2025 20:17:57 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 18/08/2025 20:17:57 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000420000004). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000004. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000020000002). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000020000002). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 148" Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000420000003). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000003. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFE00000120000001). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000520000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000520000006). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000520000006). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000520000006. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) from URL group (0xFC00000020000001). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 18/08/2025 20:17:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 18/08/2025 20:17:56 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 18/08/2025 20:17:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 148" Information 18/08/2025 20:17:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 18/08/2025 20:17:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 18/08/2025 20:17:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 18/08/2025 20:17:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 18/08/2025 20:17:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎18T19:17:54.500000000Z from ‎2025‎-‎08‎-‎17T16:57:27.814475300Z. Time Delta: 94826685 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎18T20:17:54.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 17/08/2025 17:57:27 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 18/08/2025 20:17:54 EventLog 6013 None The system uptime is 96925 seconds. Information 17/08/2025 17:57:27 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 17/08/2025 17:57:24 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 17/08/2025 17:57:24 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 148" Information 17/08/2025 17:57:24 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 17/08/2025 17:57:23 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 17/08/2025 17:57:22 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 17/08/2025 17:57:22 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Information 17/08/2025 17:57:14 User32 1074 None "The process C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 17/08/2025 17:55:00 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/08/2025 17:53:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1099 keys and creating 63 modified pages. Information 17/08/2025 17:52:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 17/08/2025 17:52:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/08/2025 17:50:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 17/08/2025 17:49:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/08/2025 17:47:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/08/2025 17:47:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:42:17 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 17/08/2025 17:41:11 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad Information 17/08/2025 17:41:08 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 17/08/2025 17:41:08 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad Information 17/08/2025 17:40:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint Information 17/08/2025 17:40:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 17/08/2025 17:40:49 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 17/08/2025 17:40:49 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint Information 17/08/2025 17:40:30 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PMMSR1CGPWG-Microsoft.HEIFImageExtension Information 17/08/2025 17:40:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:40:28 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 17/08/2025 17:40:28 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PMMSR1CGPWG-Microsoft.HEIFImageExtension Information 17/08/2025 17:40:24 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/08/2025 17:40:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2506.111.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:39:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2506.35.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:39:48 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/08/2025 17:39:48 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/08/2025 17:39:48 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 17/08/2025 17:37:04 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 17/08/2025 17:36:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenub_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\8eb37732c02a75ce_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenua_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a74c416bf60c1d4d_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/08/2025 17:35:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000005). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:35:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 17/08/2025 17:35:19 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 17/08/2025 17:33:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/08/2025 17:33:03 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 17/08/2025 17:32:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:32:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000005). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000004). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000004). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFA00000020000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFA00000020000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:32:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000003). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:31:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 17/08/2025 17:31:19 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Error 17/08/2025 17:29:59 Microsoft-Windows-DistributedCOM 10010 None The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. Information 17/08/2025 17:29:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 17/08/2025 17:29:08 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Warning 17/08/2025 17:29:04 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 17/08/2025 17:28:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:28:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 17/08/2025 17:27:19 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 17/08/2025 17:27:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:26:52 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 17/08/2025 17:26:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:26:31 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Warning 17/08/2025 17:26:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:26:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000003). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000003). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000002). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000002). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:26:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFA00000020000001). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:25:57 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFA00000020000001). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:25:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000001). Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:25:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000001). Status: 0x0. Process Id 0x1458 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:25:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 17/08/2025 17:25:04 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 17/08/2025 17:25:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/08/2025 17:24:57 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 17/08/2025 17:24:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 17/08/2025 17:24:09 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2025-08 Cumulative Update for Windows 11 Version 24H2 for x64-based Systems (KB5063878) (26100.4946) Information 17/08/2025 17:24:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Warning 17/08/2025 17:23:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/08/2025 17:23:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/08/2025 17:23:58 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 17/08/2025 17:23:56 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 17/08/2025 17:23:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:23:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57074914.Livtop_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:23:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57074904.InpApp_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:23:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57058570.Speion_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:23:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.56978801.Voiess_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/08/2025 17:23:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.54792954.Filons_1000.26100.4946.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Warning 17/08/2025 17:23:11 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0c5fef9e-7ac7-4bea-804e-3caaafee6e88/) to URL group (0xFC00000020000001). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e69cbf50-3f76-4117-9ad7-47fd8d44ac69/) from URL group (0xFE00000220000002). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/5282b6d6-ae5f-49a1-a16a-f7fbdf14f187/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:23:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/9f08b6e7-935c-487b-b4d6-a9046b9eefd1/) from URL group (0xFE00000320000001). Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:22:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 5 keys and creating 3 modified pages. Warning 17/08/2025 17:22:57 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e69cbf50-3f76-4117-9ad7-47fd8d44ac69/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000002. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/9f08b6e7-935c-487b-b4d6-a9046b9eefd1/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xC3C Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d2f40d74-4f1a-4144-af22-37fd9a99b409/) from URL group (0xFE00000220000001). Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:53 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 17/08/2025 17:22:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 17/08/2025 17:22:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d2f40d74-4f1a-4144-af22-37fd9a99b409/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x6BC Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 17/08/2025 17:22:42 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 17/08/2025 17:22:42 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 17/08/2025 17:22:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xDC4 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:42 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 17/08/2025 17:22:41 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 17/08/2025 17:22:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 17/08/2025 17:22:41 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 17/08/2025 17:22:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) unloaded successfully. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎10‎-‎18T00:52:14.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:41 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2101‎-‎07‎-‎17T21:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:40 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 17/08/2025 17:22:40 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 17/08/2025 17:22:40 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 17/08/2025 17:22:40 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 17/08/2025 17:22:40 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 17/08/2025 17:22:40 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 17/08/2025 17:22:40 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 17/08/2025 17:22:40 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 17/08/2025 17:22:40 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 17/08/2025 17:22:35 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume5) is healthy. No action is needed. Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 17/08/2025 17:22:32 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 17/08/2025 17:22:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 17/08/2025 17:22:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 17/08/2025 17:22:31 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:31 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:31 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 17/08/2025 17:22:30 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:30 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:30 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:30 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/08/2025 17:22:29 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎17T16:22:29.500000000Z. Loader time: ‎2025‎-‎08‎-‎17T16:22:29.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 17/08/2025 17:22:29 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎17T16:22:29.500000000Z. Information 16/08/2025 20:16:33 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎16T19:16:33.210152500Z. Information 16/08/2025 20:16:32 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 16/08/2025 20:16:32 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Off Event Code: 0x0 Reason: Kernel API" Information 16/08/2025 20:16:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0xFB0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:16:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000220000001). Process Id 0xFB0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:16:27 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0xEC0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 16/08/2025 20:16:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/32dabd1f-3e50-4808-ac51-13929a7faf52/) from URL group (0xFE00000520000001). Process Id 0xEC0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 17/08/2025 17:22:41 EventLog 6013 None The system uptime is 12 seconds. Information 17/08/2025 17:22:41 EventLog 6005 None The Event log service was started. Information 17/08/2025 17:22:41 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 16/08/2025 20:16:27 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 16/08/2025 20:16:27 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 16/08/2025 20:16:27 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 16/08/2025 20:16:27 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 16/08/2025 20:16:27 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 16/08/2025 20:16:27 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 16/08/2025 20:16:27 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎16T19:16:27.519635200Z from ‎2025‎-‎08‎-‎16T19:16:27.518748200Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎16T20:16:27.519635200Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 16/08/2025 20:16:27 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Error 16/08/2025 20:16:27 Service Control Manager 7043 None The Windows Security Service service did not shut down properly after receiving a preshutdown control. Information 16/08/2025 20:16:27 EventLog 6006 None The Event log service was stopped. Warning 16/08/2025 20:14:48 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 16/08/2025 20:14:42 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 16/08/2025 20:14:40 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Warning 16/08/2025 20:14:35 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5000 milliseconds. Warning 16/08/2025 20:14:30 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Error 16/08/2025 20:14:25 Microsoft-Windows-DistributedCOM 10010 None The server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} did not register with DCOM within the required timeout. Information 16/08/2025 20:14:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 32 keys and creating 4 modified pages. Information 16/08/2025 20:13:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e7378ca3062113fe_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:13:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 16/08/2025 20:13:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:13:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:13:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 4 keys and creating 1 modified pages. Information 16/08/2025 20:13:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 11 keys and creating 2 modified pages. Warning 16/08/2025 20:13:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 16/08/2025 20:12:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 16/08/2025 20:12:32 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 16/08/2025 20:11:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\838898beeb9825a0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:11:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 16/08/2025 20:11:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 16/08/2025 20:10:56 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎16T19:10:56.451073300Z from ‎2025‎-‎08‎-‎16T19:10:56.450940400Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎16T20:10:56.451073300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 16/08/2025 20:10:56 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 16/08/2025 20:10:56 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎16T19:10:56.449711400Z from ‎2025‎-‎08‎-‎16T19:10:50.058330600Z. Time Delta: 6391 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎16T20:10:56.449711400Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 16/08/2025 20:10:56 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 16/08/2025 20:10:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\99fa38820f0daa86_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 16/08/2025 20:10:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 10 modified pages. Information 16/08/2025 20:10:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Information 16/08/2025 20:10:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 15 keys and creating 3 modified pages. Warning 16/08/2025 20:10:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 16/08/2025 20:10:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 16/08/2025 20:10:34 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 16/08/2025 20:10:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 16/08/2025 20:10:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 16/08/2025 20:10:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\AC\GEH\POF.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\89bc9879cd777c28_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 7 modified pages. Information 16/08/2025 20:10:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 17 keys and creating 1 modified pages. Information 16/08/2025 20:10:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\40dfb99aa8fbeb29_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 16/08/2025 20:10:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 16/08/2025 20:10:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 36 keys and creating 7 modified pages. Information 16/08/2025 20:10:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 3 modified pages. Information 16/08/2025 20:09:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\87b68362b9c83648_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 16/08/2025 20:09:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 16/08/2025 20:09:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 16/08/2025 20:09:55 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was reorganized with a starting size of 6627328 bytes and an ending size of 6545408 bytes. Information 16/08/2025 20:09:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\ntuser.dat was cleared updating 10433 keys and creating 1141 modified pages. Information 16/08/2025 20:09:55 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 16/08/2025 20:09:52 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎14T08:53:38.550822700Z Wake Time: ‎2025‎-‎08‎-‎16T19:09:51.690503000Z Wake Source: Unknown" Warning 16/08/2025 20:09:52 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 16/08/2025 20:09:52 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 16/08/2025 20:09:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 98 keys and creating 8 modified pages. Information 16/08/2025 20:09:52 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 30 to 32. Reason Unknown BootId: 147" Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\config\DRIVERS was cleared updating 34275 keys and creating 1617 modified pages. Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000C. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000012000000C). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000012000000C). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000C. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000220000008). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000220000008). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000B. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000012000000B). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000012000000B). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000B. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000220000007). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000220000007). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFD0000022000000B. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFD0000022000000B). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFD0000022000000B). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 16/08/2025 20:09:51 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFD0000022000000B. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 16/08/2025 20:09:51 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 29 to 30. Reason SxTransition BootId: 147" Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 16/08/2025 20:09:51 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 16/08/2025 20:09:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎16T19:09:49.500000000Z from ‎2025‎-‎08‎-‎14T08:53:42.147203200Z. Time Delta: 209767352 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎16T20:09:49.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/08/2025 09:53:42 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 16/08/2025 20:09:49 EventLog 6013 None The system uptime is 452539 seconds. Information 14/08/2025 09:53:41 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 14/08/2025 09:53:38 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 14/08/2025 09:53:38 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 28 to 29. Reason Unknown BootId: 147" Information 14/08/2025 09:53:38 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 14/08/2025 09:53:38 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 14/08/2025 09:53:36 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 14/08/2025 09:50:51 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/08/2025 09:50:42 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/08/2025 09:46:47 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/08/2025 09:46:09 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/08/2025 09:45:19 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/08/2025 09:45:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2025-08 Cumulative Update for Windows 11 Version 24H2 for x64-based Systems (KB5063878) (26100.4946) Warning 14/08/2025 09:42:30 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name dl.acronis.com timed out after none of the configured DNS servers responded. Client PID 8520. Information 14/08/2025 09:36:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool x64 - v5.135 (KB890830) Information 14/08/2025 09:36:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 14/08/2025 09:35:09 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/08/2025 09:35:02 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/08/2025 09:35:02 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/08/2025 09:34:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 14/08/2025 09:32:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 14/08/2025 09:31:47 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/08/2025 09:30:59 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool x64 - v5.135 (KB890830) Information 14/08/2025 09:30:59 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 14/08/2025 09:30:56 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Error 14/08/2025 09:30:55 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. Information 14/08/2025 09:30:55 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 14/08/2025 09:30:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22506.1401.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 14/08/2025 09:30:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2532.3.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 14/08/2025 09:30:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 14/08/2025 09:30:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 14/08/2025 09:30:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 14/08/2025 09:30:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 14/08/2025 09:30:15 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 14/08/2025 09:26:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/08/2025 09:18:53 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy23) is healthy. No action is needed. Information 14/08/2025 09:17:10 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 14/08/2025 09:17:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/08/2025 09:16:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 14/08/2025 09:16:47 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 14/08/2025 09:16:45 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" enable=yes profile=Any protocol=udp localport=17500 C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Information 14/08/2025 09:16:45 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" enable=yes profile=Any protocol=tcp localport=17500-17510 C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Information 14/08/2025 09:16:45 Microsoft-Windows-Configuration-Change-Monitor 1 None "The description for Event ID 1 from source Microsoft-Windows-Configuration-Change-Monitor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EV_RenderedValue_0.00 C:\WINDOWS\system32\netsh.exe advfirewall firewall delete rule name=Dropbox ""program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"" C:\Windows\System32\netsh.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\app\Dropbox.exe C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18408_1505597155\DropboxClientInstaller.exe C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe C:\Windows\System32\services.exe C:\Windows\System32\wininit.exe The locale specific resource for the desired message is not present " Warning 14/08/2025 09:16:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/08/2025 09:15:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎14T08:15:40.561751100Z from ‎2025‎-‎08‎-‎14T08:15:40.561336500Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎14T09:15:40.561751100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/08/2025 09:15:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 14/08/2025 09:15:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎14T08:15:40.560473100Z from ‎2025‎-‎08‎-‎14T08:15:39.495554300Z. Time Delta: 1064 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎14T09:15:40.560473100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/08/2025 09:15:40 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 14/08/2025 09:15:23 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 14/08/2025 09:15:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/08/2025 09:14:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/08/2025 09:14:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/08/2025 09:14:44 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 14/08/2025 09:14:42 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎13T19:39:15.028463600Z Wake Time: ‎2025‎-‎08‎-‎14T08:14:41.683677600Z Wake Source: Unknown" Warning 14/08/2025 09:14:42 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 14/08/2025 09:14:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000015. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFF00000120000015). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFF00000120000015). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000015. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000D. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000002000000D). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000002000000D). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000D. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000A. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000012000000A). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000012000000A). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000A. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000D. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000032000000D). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000032000000D). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000D. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000520000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000520000007). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000520000007). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000520000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/08/2025 09:14:42 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 26 to 28. Reason Unknown BootId: 147" Warning 14/08/2025 09:14:41 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 14/08/2025 09:14:41 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 25 to 26. Reason SxTransition BootId: 147" Information 14/08/2025 09:14:41 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 14/08/2025 09:14:41 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 14/08/2025 09:14:41 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 14/08/2025 09:14:41 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 14/08/2025 09:14:39 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎14T08:14:39.500000000Z from ‎2025‎-‎08‎-‎13T19:39:17.660148200Z. Time Delta: 45321839 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎14T09:14:39.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/08/2025 20:39:17 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 13/08/2025 20:39:16 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 13/08/2025 20:39:15 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 13/08/2025 20:39:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 24 to 25. Reason Unknown BootId: 147" Information 13/08/2025 20:39:15 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 13/08/2025 20:39:14 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 13/08/2025 20:39:13 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Warning 13/08/2025 20:39:08 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5016 milliseconds. Error 13/08/2025 20:39:06 Microsoft-Windows-DistributedCOM 10010 None The server {5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25} did not register with DCOM within the required timeout. Warning 13/08/2025 20:39:03 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Warning 13/08/2025 20:37:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 20:30:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 21 keys and creating 9 modified pages. Information 13/08/2025 20:30:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\c734854775b982fd_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 20:30:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 5 modified pages. Information 13/08/2025 20:30:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 2 modified pages. Information 13/08/2025 20:29:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000008). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:29:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13/08/2025 20:29:02 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy22) is healthy. No action is needed. Information 13/08/2025 20:29:02 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 13/08/2025 20:28:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 20:27:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000008). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:27:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000006). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:27:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000006). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:27:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000006). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:27:06 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 13/08/2025 20:27:06 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 13/08/2025 20:27:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 20:26:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000006). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000C). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000C). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000007). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000007). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000003). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 13/08/2025 20:26:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 20:26:30 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000003). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:30 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000B). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000B). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:26:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 13/08/2025 20:24:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 20:24:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 20:24:58 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 13/08/2025 20:24:56 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎13T17:41:16.664666700Z Wake Time: ‎2025‎-‎08‎-‎13T19:24:55.684916600Z Wake Source: Unknown" Warning 13/08/2025 20:24:56 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 13/08/2025 20:24:56 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000A. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000002000000A). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000002000000A). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000A. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000220000006). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000220000006). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000009). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000009). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000008). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000008). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000C. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE0000032000000C). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE0000032000000C). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000C. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 20:24:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 22 to 24. Reason Unknown BootId: 147" Information 13/08/2025 20:24:55 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 21 to 22. Reason SxTransition BootId: 147" Information 13/08/2025 20:24:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 13/08/2025 20:24:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 13/08/2025 20:24:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 13/08/2025 20:24:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 13/08/2025 20:24:53 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎13T19:24:53.500000000Z from ‎2025‎-‎08‎-‎13T17:41:19.368206900Z. Time Delta: 6214131 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎13T20:24:53.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/08/2025 18:41:19 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 13/08/2025 18:41:18 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 13/08/2025 18:41:16 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 13/08/2025 18:41:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 20 to 21. Reason Unknown BootId: 147" Information 13/08/2025 18:41:16 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 13/08/2025 18:41:16 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 13/08/2025 18:41:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 13/08/2025 18:41:14 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 13/08/2025 18:41:09 Application Popup 26 None Application popup: idle_report.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application. Warning 13/08/2025 18:38:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 18:38:08 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy21) is healthy. No action is needed. Warning 13/08/2025 18:38:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 18:38:07 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 13/08/2025 18:37:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000005). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:37:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13/08/2025 18:36:22 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 13/08/2025 18:36:22 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 13/08/2025 18:36:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 18:35:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 18:35:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000005). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000005). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000005). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000B). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000B). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000A). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000A). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:35:17 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 13/08/2025 18:34:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 18:33:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 18:33:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 18:33:56 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 13/08/2025 18:33:54 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎13T15:22:19.222969600Z Wake Time: ‎2025‎-‎08‎-‎13T17:33:53.685014000Z Wake Source: Unknown" Warning 13/08/2025 18:33:54 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 13/08/2025 18:33:54 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000009). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000009). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000007). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000007). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000008). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000008). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000007). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000007). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000320000009). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000320000009). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000009. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 18:33:54 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 18 to 20. Reason Unknown BootId: 147" Information 13/08/2025 18:33:53 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 17 to 18. Reason SxTransition BootId: 147" Information 13/08/2025 18:33:53 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 13/08/2025 18:33:53 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 13/08/2025 18:33:53 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 13/08/2025 18:33:53 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 13/08/2025 18:33:51 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎13T17:33:51.500000000Z from ‎2025‎-‎08‎-‎13T15:22:22.388847300Z. Time Delta: 7889111 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎13T18:33:51.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/08/2025 16:22:22 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 13/08/2025 16:22:21 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 13/08/2025 16:22:19 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 13/08/2025 16:22:19 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 16 to 17. Reason Unknown BootId: 147" Information 13/08/2025 16:22:19 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 13/08/2025 16:22:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 13/08/2025 16:22:13 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5015 milliseconds. Information 13/08/2025 16:22:08 Application Popup 26 None Application popup: idle_report.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application. Information 13/08/2025 16:19:59 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 13/08/2025 16:19:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13/08/2025 16:16:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 13/08/2025 16:12:11 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 13/08/2025 16:11:54 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 13/08/2025 16:11:52 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 13/08/2025 16:11:52 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 13/08/2025 16:11:24 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 13/08/2025 16:11:09 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 13/08/2025 16:11:09 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 13/08/2025 16:09:50 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-MICROSOFT.ZUNEMUSIC Information 13/08/2025 16:09:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 16:09:48 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-MICROSOFT.ZUNEMUSIC Information 13/08/2025 16:09:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_11.2507.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 13/08/2025 16:09:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 13/08/2025 16:09:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 13/08/2025 16:06:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13/08/2025 16:04:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 13/08/2025 15:59:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 15:55:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 15:51:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_d9ma7nkbkv4rp\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\47b86fda953346a8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 15:51:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 15:51:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 4 keys and creating 1 modified pages. Information 13/08/2025 15:50:34 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy20) is healthy. No action is needed. Information 13/08/2025 15:50:34 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 13/08/2025 15:50:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 15:48:32 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 13/08/2025 15:48:32 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 13/08/2025 15:48:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 15:47:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 15:47:03 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 13/08/2025 15:47:00 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy19) is healthy. No action is needed. Information 13/08/2025 15:47:00 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 13/08/2025 15:46:43 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp Information 13/08/2025 15:46:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 15:46:39 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp Information 13/08/2025 15:46:38 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy18) is healthy. No action is needed. Information 13/08/2025 15:46:18 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop Warning 13/08/2025 15:46:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 15:46:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/08/2025 15:46:10 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Information 13/08/2025 15:46:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop Information 13/08/2025 15:46:04 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 13/08/2025 15:45:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2508.1001.27.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 13/08/2025 15:45:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎13T14:45:21.103641700Z from ‎2025‎-‎08‎-‎13T14:45:21.103447000Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎13T15:45:21.103641700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/08/2025 15:45:21 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 13/08/2025 15:45:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎13T14:45:21.101538900Z from ‎2025‎-‎08‎-‎13T14:45:17.086507900Z. Time Delta: 4015 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎13T15:45:21.101538900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/08/2025 15:45:21 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 13/08/2025 15:45:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 13/08/2025 15:45:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 13/08/2025 15:45:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 13/08/2025 15:45:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 13/08/2025 15:45:01 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 13/08/2025 15:44:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/08/2025 15:44:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/08/2025 15:44:21 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 13/08/2025 15:44:19 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎11T19:16:31.135523000Z Wake Time: ‎2025‎-‎08‎-‎13T14:44:18.688802200Z Wake Source: Unknown" Warning 13/08/2025 15:44:19 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 13/08/2025 15:44:19 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000006). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000006). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000420000006). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000420000006). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000320000008). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000320000008). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000008. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000005). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000005). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000320000007). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000320000007). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000007. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/08/2025 15:44:19 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 14 to 16. Reason Unknown BootId: 147" Information 13/08/2025 15:44:18 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 13/08/2025 15:44:18 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 13/08/2025 15:44:18 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 13 to 14. Reason SxTransition BootId: 147" Information 13/08/2025 15:44:18 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 13/08/2025 15:44:18 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 13/08/2025 15:44:18 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 13/08/2025 15:44:18 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 13/08/2025 15:44:16 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎13T14:44:16.500000000Z from ‎2025‎-‎08‎-‎11T19:16:33.340761000Z. Time Delta: 156463159 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎13T15:44:16.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 20:16:33 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 13/08/2025 15:44:16 EventLog 6013 None The system uptime is 177411 seconds. Information 11/08/2025 20:16:32 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 11/08/2025 20:16:31 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 11/08/2025 20:16:31 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 12 to 13. Reason Unknown BootId: 147" Information 11/08/2025 20:16:31 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 11/08/2025 20:16:30 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 11/08/2025 20:16:29 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5015 milliseconds. Warning 11/08/2025 20:16:29 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 11/08/2025 20:14:45 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 11/08/2025 20:14:45 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 11/08/2025 20:14:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000005). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:14:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 11/08/2025 20:14:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 20:12:31 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 20:12:31 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 11/08/2025 20:12:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 20:12:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:12:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:12:10 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:12:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 11/08/2025 20:12:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 20:11:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 20:11:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T19:11:42.497629600Z from ‎2025‎-‎08‎-‎11T19:11:42.497588700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎11T20:11:42.497629600Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 20:11:42 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 11/08/2025 20:11:42 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 11/08/2025 20:11:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T19:11:42.496336700Z from ‎2025‎-‎08‎-‎11T19:11:40.488045800Z. Time Delta: 2008 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 11184). RTC time: ‎2025‎-‎08‎-‎11T20:11:42.496336700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 20:11:42 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 11/08/2025 20:11:24 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 11/08/2025 20:10:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 20:10:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 20:10:45 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/08/2025 20:10:43 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎11T15:59:31.634876300Z Wake Time: ‎2025‎-‎08‎-‎11T19:10:42.685544200Z Wake Source: Unknown" Warning 11/08/2025 20:10:43 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 11/08/2025 20:10:43 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/08/2025 20:10:43 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 147" Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000720000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000420000005). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000420000005). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000006). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000006). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000004. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000420000004). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000004. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000220000003). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000220000003). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 20:10:42 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 11/08/2025 20:10:42 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 11/08/2025 20:10:42 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 147" Information 11/08/2025 20:10:42 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/08/2025 20:10:42 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/08/2025 20:10:42 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 11/08/2025 20:10:42 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 11/08/2025 20:10:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T19:10:40.500000000Z from ‎2025‎-‎08‎-‎11T15:59:34.183499300Z. Time Delta: 11466316 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎11T20:10:40.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 16:59:34 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 11/08/2025 16:59:33 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 11/08/2025 16:59:31 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 11/08/2025 16:59:31 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 147" Information 11/08/2025 16:59:31 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 11/08/2025 16:59:31 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 11/08/2025 16:59:29 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 11/08/2025 16:59:29 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 11/08/2025 16:59:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:59:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 11/08/2025 16:59:03 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 11/08/2025 16:59:02 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 11/08/2025 16:57:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 16:57:09 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 16:57:09 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 11/08/2025 16:57:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:57:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 11/08/2025 16:57:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 16:57:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:56:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 11/08/2025 16:56:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 16:55:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 16:55:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 16:55:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\DropboxInc.Dropbox_wkt425jdc3sga\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\5a12e5cb018680d4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 11/08/2025 16:54:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 16:54:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 16:54:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/08/2025 16:54:44 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎11T14:14:16.972134200Z Wake Time: ‎2025‎-‎08‎-‎11T15:54:43.685318100Z Wake Source: Unknown" Warning 11/08/2025 16:54:44 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 11/08/2025 16:54:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/08/2025 16:54:44 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 147" Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000520000004. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000520000004). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000520000004). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000520000004. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000520000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000520000003). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000520000003). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000520000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000320000006). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000320000006). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000006. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000220000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000220000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000005). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 16:54:43 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 11/08/2025 16:54:43 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 147" Information 11/08/2025 16:54:43 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/08/2025 16:54:43 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/08/2025 16:54:43 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 11/08/2025 16:54:43 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 11/08/2025 16:54:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T15:54:41.500000000Z from ‎2025‎-‎08‎-‎11T14:14:22.465449800Z. Time Delta: 6019034 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎11T16:54:41.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 15:14:22 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 11/08/2025 15:14:22 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 11/08/2025 15:14:17 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 11/08/2025 15:14:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 147" Information 11/08/2025 15:14:16 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 11/08/2025 15:14:16 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 11/08/2025 15:14:15 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 11/08/2025 15:14:15 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 11/08/2025 15:09:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 11/08/2025 15:07:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 11/08/2025 15:06:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000005). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:06:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 11/08/2025 15:05:57 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 11/08/2025 15:04:57 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 15:04:57 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 11/08/2025 15:04:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 15:04:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 15:04:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000005). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000003). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:04:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:03:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:03:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000004). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:03:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:03:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 11/08/2025 15:03:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 15:02:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 15:01:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 15:01:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 15:01:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/08/2025 15:01:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 11/08/2025 15:01:45 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎11T13:32:51.003990600Z Wake Time: ‎2025‎-‎08‎-‎11T14:01:44.687798800Z Wake Source: Unknown" Warning 11/08/2025 15:01:45 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 11/08/2025 15:01:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000620000003). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000520000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFC00000520000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFC00000520000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000520000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000120000003). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000003. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000620000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) from URL group (0xFE00000020000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 15:01:45 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 147" Information 11/08/2025 15:01:44 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 11/08/2025 15:01:44 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 147" Information 11/08/2025 15:01:44 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/08/2025 15:01:44 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/08/2025 15:01:44 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 11/08/2025 15:01:44 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 11/08/2025 15:01:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T14:01:42.500000000Z from ‎2025‎-‎08‎-‎11T13:32:52.570528600Z. Time Delta: 1729929 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎11T15:01:42.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 14:32:52 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 11/08/2025 14:32:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000002). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:32:52 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 11/08/2025 14:32:51 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 11/08/2025 14:32:51 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 147" Information 11/08/2025 14:32:51 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 11/08/2025 14:32:50 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 11/08/2025 14:32:48 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 11/08/2025 14:32:43 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 11/08/2025 14:32:43 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 11/08/2025 14:32:38 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 11/08/2025 14:32:31 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 11/08/2025 14:32:30 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 11/08/2025 14:31:48 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 11/08/2025 14:31:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 14:31:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 14:30:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000002). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000001). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000001). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000003). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000002). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:30:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000001). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 11/08/2025 14:29:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 14:29:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 14:29:54 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 11/08/2025 14:29:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 14:29:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000001). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000001). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x10A8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:29:29 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Warning 11/08/2025 14:28:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 14:28:57 Service Control Manager 7045 None "A service was installed in the system. Service Name: Logi Options+ Service File Name: ""C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe"" --run-as-service Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 11/08/2025 14:28:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e47b7c7e-6c7b-45b6-ba30-d2c4b3b6b6bc/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:28:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:28:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:28:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/0d8b1ee6-d000-496c-abc5-9822f493104f/) from URL group (0xFC00000220000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:28:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Edge.GameAssist_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Warning 11/08/2025 14:28:01 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 11/08/2025 14:27:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/0d8b1ee6-d000-496c-abc5-9822f493104f/) to URL group (0xFC00000220000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:54 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000220000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bc558382-7600-4064-92d7-8e85a93605c9/) from URL group (0xFE00000120000002). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:53 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bc558382-7600-4064-92d7-8e85a93605c9/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:53 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:53 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:53 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/f115f934-a6aa-4eb7-8af3-633bf39285ba/) from URL group (0xFE00000120000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/f115f934-a6aa-4eb7-8af3-633bf39285ba/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:52 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/32dabd1f-3e50-4808-ac51-13929a7faf52/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0xEC0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000520000001. Status 0x0. Process Id 0xEC0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ca4fb1f7-4548-4093-912a-6c60e7dbe734/) from URL group (0xFE00000420000001). Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 3582 keys and creating 1209 modified pages. Warning 11/08/2025 14:27:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 14:27:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 14:27:44 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 11/08/2025 14:27:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/08/2025 14:27:40 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Service (GoogleUpdaterService141.0.7340.0) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\updater.exe"" --system --windows-service --service=update Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 11/08/2025 14:27:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ca4fb1f7-4548-4093-912a-6c60e7dbe734/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x7F8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0xFB0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:39 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0xFB0 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat was cleared updating 79 keys and creating 13 modified pages. Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 11/08/2025 14:27:38 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 11/08/2025 14:27:38 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 11/08/2025 14:27:38 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 11/08/2025 14:27:38 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) unloaded successfully. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:38 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2028‎-‎09‎-‎07T04:23:58.000000000Z) has successfully loaded and registered with Filter Manager. Warning 11/08/2025 14:27:38 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 11/08/2025 14:27:38 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 11/08/2025 14:27:38 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/08/2025 14:27:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 285 keys and creating 69 modified pages. Information 11/08/2025 14:27:37 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 215 keys and creating 20 modified pages. Information 11/08/2025 14:27:37 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 233 keys and creating 19 modified pages. Information 11/08/2025 14:27:37 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 11/08/2025 14:27:37 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 11/08/2025 14:27:37 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 11/08/2025 14:27:37 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 11/08/2025 14:27:37 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 11/08/2025 14:27:37 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 11/08/2025 14:27:37 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 11/08/2025 14:27:37 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 11/08/2025 14:27:37 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 11/08/2025 14:27:30 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume5) is healthy. No action is needed. Information 11/08/2025 14:27:27 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 11/08/2025 14:27:27 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 141651968 bytes and an ending size of 132263936 bytes. Information 11/08/2025 14:27:25 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 11/08/2025 14:27:25 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 11/08/2025 14:27:25 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 11/08/2025 14:27:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 887 keys and creating 132 modified pages. Information 11/08/2025 14:27:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 71 keys and creating 9 modified pages. Information 11/08/2025 14:27:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 89 keys and creating 5 modified pages. Information 11/08/2025 14:27:24 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:24 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:24 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 11/08/2025 14:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 14:27:23 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎08‎-‎11T13:27:22.500000000Z. Loader time: ‎2025‎-‎08‎-‎11T13:27:22.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 11/08/2025 14:27:23 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎08‎-‎11T13:27:22.500000000Z. Information 11/08/2025 08:08:01 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎08‎-‎11T07:08:01.786967200Z. Information 11/08/2025 08:08:01 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 11/08/2025 08:08:00 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Off Event Code: 0x0 Reason: Kernel API" Information 11/08/2025 08:07:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000001. Status 0x0. Process Id 0xF38 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:07:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000620000001). Process Id 0xF38 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 14:27:38 EventLog 6013 None The system uptime is 16 seconds. Information 11/08/2025 14:27:38 EventLog 6005 None The Event log service was started. Information 11/08/2025 14:27:38 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 11/08/2025 08:07:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 11/08/2025 08:07:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/d300c310-5c97-4069-babb-8ded903fc836/) from URL group (0xFE00000720000001). Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 11/08/2025 08:07:55 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 11/08/2025 08:07:55 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 11/08/2025 08:07:55 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 11/08/2025 08:07:55 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 11/08/2025 08:07:55 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 11/08/2025 08:07:55 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 11/08/2025 08:07:55 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T07:07:55.391452900Z from ‎2025‎-‎08‎-‎11T07:07:55.390863200Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎11T08:07:55.391452900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 08:07:55 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Error 11/08/2025 08:07:55 Service Control Manager 7043 None The Windows Security Service service did not shut down properly after receiving a preshutdown control. Information 11/08/2025 08:07:55 EventLog 6006 None The Event log service was stopped. Information 11/08/2025 08:07:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:07:34 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 11/08/2025 08:07:33 winsrvext 100 None Process C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe is delaying system shutdown after 5031 milliseconds. Warning 11/08/2025 08:07:28 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5016 milliseconds. Information 11/08/2025 08:07:26 Service Control Manager 7045 None "A service was installed in the system. Service Name: Adobe Genuine Software Monitor Service Service File Name: ""C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 11/08/2025 08:07:23 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy29) is healthy. No action is needed. Warning 11/08/2025 08:07:23 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5032 milliseconds. Error 11/08/2025 08:07:19 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy!App.AppXyvyv4mghdjas8j88defq0w1hc410kvzt.mca did not register with DCOM within the required timeout. Information 11/08/2025 08:06:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 11/08/2025 08:06:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e382a49e584ad8f0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 11/08/2025 08:06:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 5 modified pages. Information 11/08/2025 08:06:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 25 keys and creating 4 modified pages. Warning 11/08/2025 08:06:15 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 11/08/2025 08:05:29 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/08/2025 08:05:29 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 11/08/2025 08:05:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000018). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000018). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000017). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 11/08/2025 08:05:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 08:05:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000017). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:10 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:05:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 11/08/2025 08:04:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 08:04:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 08:03:59 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 11/08/2025 08:03:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Edge.GameAssist_1.0.3456.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 11/08/2025 08:03:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 11/08/2025 08:03:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\cdb62c5d8f4fcab0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 11/08/2025 08:02:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 08:02:45 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 11/08/2025 08:02:42 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 11/08/2025 08:02:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 11/08/2025 08:02:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2508.37081.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 11/08/2025 08:02:39 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 11/08/2025 08:02:38 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PC1H9VN18CM-Microsoft.StartExperiencesApp Information 11/08/2025 08:02:37 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_22506.1401.4.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 11/08/2025 08:02:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 11/08/2025 08:02:35 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PC1H9VN18CM-Microsoft.StartExperiencesApp Information 11/08/2025 08:02:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.73.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 11/08/2025 08:02:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T07:02:30.494984600Z from ‎2025‎-‎08‎-‎11T07:02:30.494589600Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎11T08:02:30.494984600Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 08:02:30 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 11/08/2025 08:02:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T07:02:30.489540000Z from ‎2025‎-‎08‎-‎11T07:02:23.082990300Z. Time Delta: 7406 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎11T08:02:30.489540000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 11/08/2025 08:02:30 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 11/08/2025 08:02:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was cleared updating 15041 keys and creating 2540 modified pages. Information 11/08/2025 08:02:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 11/08/2025 08:02:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 11/08/2025 08:02:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 11/08/2025 08:02:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 11/08/2025 08:02:07 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 11/08/2025 08:02:07 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 11/08/2025 08:01:54 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Internal Service (GoogleUpdaterInternalService141.0.7340.0) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\updater.exe"" --system --windows-service --service=update-internal Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 11/08/2025 08:01:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\config\COMPONENTS was cleared updating 147962 keys and creating 13460 modified pages. Warning 11/08/2025 08:01:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/08/2025 08:01:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/08/2025 08:01:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/08/2025 08:01:25 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎08T18:44:22.528502700Z Wake Time: ‎2025‎-‎08‎-‎11T07:01:24.694318900Z Wake Source: Unknown" Warning 11/08/2025 08:01:25 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 11/08/2025 08:01:25 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000001D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000001D). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000001D). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000001D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000010. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000010). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000010). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000010. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000016. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000016). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000016). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000016. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000022000000E. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000022000000E). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000022000000E). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000022000000E. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000F. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000032000000F). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000032000000F). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000F. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 11/08/2025 08:01:25 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 30 to 32. Reason Unknown BootId: 146" Warning 11/08/2025 08:01:24 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 11/08/2025 08:01:24 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 29 to 30. Reason SxTransition BootId: 146" Information 11/08/2025 08:01:24 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/08/2025 08:01:24 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/08/2025 08:01:24 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 11/08/2025 08:01:24 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 11/08/2025 08:01:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎11T07:01:22.500000000Z from ‎2025‎-‎08‎-‎08T18:44:25.298273600Z. Time Delta: 217017201 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎11T08:01:22.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 08/08/2025 19:44:25 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 11/08/2025 08:01:22 EventLog 6013 None The system uptime is 1177429 seconds. Information 08/08/2025 19:44:24 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 08/08/2025 19:44:22 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 08/08/2025 19:44:22 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 28 to 29. Reason Unknown BootId: 146" Information 08/08/2025 19:44:22 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 08/08/2025 19:44:22 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 08/08/2025 19:44:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 08/08/2025 19:44:20 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5046 milliseconds. Warning 08/08/2025 19:44:20 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5062 milliseconds. Error 08/08/2025 19:44:15 Microsoft-Windows-DistributedCOM 10010 None The server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} did not register with DCOM within the required timeout. Warning 08/08/2025 19:42:34 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 08/08/2025 19:42:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 19:41:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000001C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:41:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 08/08/2025 19:41:15 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy28) is healthy. No action is needed. Warning 08/08/2025 19:40:49 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 08/08/2025 19:39:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000001C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000010). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000010). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:39 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2025-08 .NET 8.0.19 Update for x64 Client (KB5064838) Information 08/08/2025 19:39:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000F). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000F). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000E). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000E). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000015). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000015). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:15 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 08/08/2025 19:39:15 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 08/08/2025 19:39:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 19:39:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000D). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000D). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:39:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000D). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 08/08/2025 19:38:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 08/08/2025 19:38:33 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 08/08/2025 19:37:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000D). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:37:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:37:50 Service Control Manager 7045 None "A service was installed in the system. Service Name: Logi Options+ Service File Name: ""C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe"" --run-as-service Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 08/08/2025 19:37:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:37:42 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 19:37:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.1.200.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Warning 08/08/2025 19:37:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 19:36:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 19:36:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Warning 08/08/2025 19:36:48 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 08/08/2025 19:36:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Warning 08/08/2025 19:36:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 08/08/2025 19:36:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 19:36:18 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 08/08/2025 19:36:16 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎08T10:47:06.980204500Z Wake Time: ‎2025‎-‎08‎-‎08T18:36:15.687461200Z Wake Source: Unknown" Warning 08/08/2025 19:36:16 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 08/08/2025 19:36:16 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000001B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000001B). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000001B). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000001B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000001A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000001A). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000001A). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000001A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000014. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000014). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000014). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000014. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000620000013. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFC00000620000013). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFC00000620000013). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000620000013. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000022000003D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFF0000022000003D). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFF0000022000003D). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000022000003D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 19:36:16 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2025-08 .NET 8.0.19 Update for x64 Client (KB5064838) Information 08/08/2025 19:36:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 26 to 28. Reason Unknown BootId: 146" Information 08/08/2025 19:36:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 25 to 26. Reason SxTransition BootId: 146" Information 08/08/2025 19:36:15 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 08/08/2025 19:36:15 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 08/08/2025 19:36:15 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 08/08/2025 19:36:15 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 08/08/2025 19:36:13 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎08T18:36:13.500000000Z from ‎2025‎-‎08‎-‎08T10:47:10.485939900Z. Time Delta: 28143014 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎08T19:36:13.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 08/08/2025 11:47:10 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 08/08/2025 19:36:13 EventLog 6013 None The system uptime is 959920 seconds. Information 08/08/2025 11:47:07 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 08/08/2025 11:47:06 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 24 to 25. Reason Unknown BootId: 146" Information 08/08/2025 11:47:06 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 08/08/2025 11:47:06 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 08/08/2025 11:47:04 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 08/08/2025 11:46:59 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5063 milliseconds. Information 08/08/2025 11:46:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 08/08/2025 11:44:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 11:39:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Error 08/08/2025 11:32:03 Microsoft-Windows-DistributedCOM 10010 None The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. Information 08/08/2025 11:31:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 08/08/2025 11:29:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 11:26:39 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:19:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:19:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 08/08/2025 11:19:00 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy27) is healthy. No action is needed. Warning 08/08/2025 11:17:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 11:17:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000B). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:46 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000B). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:46 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000013). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000013). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000012). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000012). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000010). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 08/08/2025 11:17:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000010). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000A). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000A). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:17:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 11:17:03 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 08/08/2025 11:17:03 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 08/08/2025 11:16:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 11:16:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 08/08/2025 11:16:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:16:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1093 keys and creating 63 modified pages. Warning 08/08/2025 11:16:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 11:16:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:16:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 4 keys and creating 1 modified pages. Information 08/08/2025 11:16:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 11 keys and creating 2 modified pages. Information 08/08/2025 11:15:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000012). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:15:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 08/08/2025 11:15:36 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience. Information 08/08/2025 11:15:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Information 08/08/2025 11:15:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_525.18101.90.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:15:22 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 08/08/2025 11:15:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 32 keys and creating 4 modified pages. Information 08/08/2025 11:15:19 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 08/08/2025 11:15:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25071.33.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 08/08/2025 11:15:11 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 08/08/2025 11:15:11 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Information 08/08/2025 11:15:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25071.54.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:15:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:14:59 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 08/08/2025 11:14:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:14:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NHT9RB2F4HD-Microsoft.Copilot Information 08/08/2025 11:14:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:14:29 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 08/08/2025 11:14:29 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:14:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:14:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy26) is healthy. No action is needed. Information 08/08/2025 11:14:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Error 08/08/2025 11:14:05 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. Information 08/08/2025 11:14:05 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy25) is healthy. No action is needed. Information 08/08/2025 11:14:04 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 08/08/2025 11:14:04 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:14:00 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 08/08/2025 11:13:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:13:58 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 08/08/2025 11:13:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_22506.1401.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:13:47 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:13:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N0DX20HK701-Microsoft.WindowsTerminal Information 08/08/2025 11:13:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:13:36 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy24) is healthy. No action is needed. Information 08/08/2025 11:13:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N0DX20HK701-Microsoft.WindowsTerminal Information 08/08/2025 11:13:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000012). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000019). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000019). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:33 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000B). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000B). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000E). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000E). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000018). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000018). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000F). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000F). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2531.4.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:13:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000D). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2508.31121.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000D). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000017). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000017). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:13:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000010). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:12:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.22.12111.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 08/08/2025 11:12:47 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:12:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000010). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:12:43 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000012000000F). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:12:43 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000012000000F). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:12:43 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:12:43 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:12:38 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 08/08/2025 11:12:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 20 keys and creating 4 modified pages. Warning 08/08/2025 11:12:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 11:12:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\1ffa6f51648aa2e6_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:12:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 08/08/2025 11:12:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎08T10:12:21.998483300Z from ‎2025‎-‎08‎-‎08T10:12:21.997755600Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎08T11:12:21.998483300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 08/08/2025 11:12:21 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 08/08/2025 11:12:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎08T10:12:21.996721500Z from ‎2025‎-‎08‎-‎08T10:12:12.467231400Z. Time Delta: 9529 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎08T11:12:21.996721500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 08/08/2025 11:12:21 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 08/08/2025 11:12:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\838898beeb9825a0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:12:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 08/08/2025 11:12:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 10 modified pages. Information 08/08/2025 11:11:56 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 08/08/2025 11:11:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 08/08/2025 11:11:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 08/08/2025 11:11:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\89bc9879cd777c28_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:11:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 18 keys and creating 4 modified pages. Information 08/08/2025 11:11:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:11:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 08/08/2025 11:11:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\AC\GEH\POF.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:11:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\6b87ed64cdffbeb5_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 08/08/2025 11:11:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 08/08/2025 11:11:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 17 keys and creating 1 modified pages. Information 08/08/2025 11:11:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 3 modified pages. Information 08/08/2025 11:11:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 16 keys and creating 6 modified pages. Information 08/08/2025 11:11:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\87b68362b9c83648_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 08/08/2025 11:11:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 08/08/2025 11:11:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 08/08/2025 11:11:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 11230 keys and creating 1138 modified pages. Information 08/08/2025 11:11:17 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\ntuser.dat was reorganized with a starting size of 7569408 bytes and an ending size of 7020544 bytes. Information 08/08/2025 11:11:17 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 08/08/2025 11:11:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 08/08/2025 11:11:15 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎03T17:51:16.023432000Z Wake Time: ‎2025‎-‎08‎-‎08T10:11:14.682201000Z Wake Source: Unknown" Warning 08/08/2025 11:11:15 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 08/08/2025 11:11:15 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000E. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000012000000E). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000012000000E). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000E. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000012000000D). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000012000000D). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000012000000C). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000012000000C). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000012000000B). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000012000000B). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000012000000A). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000012000000A). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 08/08/2025 11:11:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 22 to 24. Reason Unknown BootId: 146" Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 99 keys and creating 8 modified pages. Warning 08/08/2025 11:11:14 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 21 to 22. Reason SxTransition BootId: 146" Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 08/08/2025 11:11:14 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 7671808 bytes and an ending size of 7020544 bytes. Information 08/08/2025 11:11:12 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎08T10:11:12.500000000Z from ‎2025‎-‎08‎-‎03T17:51:19.150430500Z. Time Delta: 404393349 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎08T11:11:12.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 03/08/2025 18:51:19 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 08/08/2025 11:11:12 EventLog 6013 None The system uptime is 929628 seconds. Information 03/08/2025 18:51:18 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 03/08/2025 18:51:16 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 03/08/2025 18:51:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 20 to 21. Reason Unknown BootId: 146" Information 03/08/2025 18:51:16 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 03/08/2025 18:51:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 03/08/2025 18:51:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 03/08/2025 18:51:14 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 03/08/2025 18:45:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 03/08/2025 18:44:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy23) is healthy. No action is needed. Information 03/08/2025 18:43:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:43:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 03/08/2025 18:42:40 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 03/08/2025 18:42:40 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 03/08/2025 18:42:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 03/08/2025 18:41:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 03/08/2025 18:41:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000010). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000010). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000E). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000E). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:10 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 03/08/2025 18:41:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000016). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:41:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000016). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:40:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 03/08/2025 18:40:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 03/08/2025 18:40:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎03T17:40:30.242409600Z from ‎2025‎-‎08‎-‎03T17:40:30.241941100Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎03T18:40:30.242409600Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 03/08/2025 18:40:30 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 03/08/2025 18:40:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎03T17:40:30.239362600Z from ‎2025‎-‎08‎-‎03T17:40:25.489574000Z. Time Delta: 4749 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎03T18:40:30.239362600Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 03/08/2025 18:40:30 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 03/08/2025 18:40:09 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 03/08/2025 18:39:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 03/08/2025 18:39:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 03/08/2025 18:39:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 03/08/2025 18:39:28 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎08‎-‎01T21:15:56.504145100Z Wake Time: ‎2025‎-‎08‎-‎03T17:39:27.678916100Z Wake Source: Unknown" Warning 03/08/2025 18:39:28 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 03/08/2025 18:39:28 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000015. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000015). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000015). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000015. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000014. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000014). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000014). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000014. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000013. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000013). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000013). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000013. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000005. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000220000005). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000005. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF0000032000001C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFF0000032000001C). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFF0000032000001C). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF0000032000001C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 03/08/2025 18:39:28 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 18 to 20. Reason Unknown BootId: 146" Warning 03/08/2025 18:39:27 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 03/08/2025 18:39:27 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 17 to 18. Reason SxTransition BootId: 146" Information 03/08/2025 18:39:27 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 03/08/2025 18:39:27 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 03/08/2025 18:39:27 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 03/08/2025 18:39:27 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 03/08/2025 18:39:25 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎03T17:39:25.500000000Z from ‎2025‎-‎08‎-‎01T21:16:02.376184800Z. Time Delta: 159803123 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎03T18:39:25.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 01/08/2025 22:16:02 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 03/08/2025 18:39:25 EventLog 6013 None The system uptime is 524526 seconds. Information 01/08/2025 22:16:01 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 01/08/2025 22:15:56 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 01/08/2025 22:15:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 16 to 17. Reason Unknown BootId: 146" Information 01/08/2025 22:15:56 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 01/08/2025 22:15:56 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 01/08/2025 22:15:54 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5032 milliseconds. Warning 01/08/2025 22:15:49 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 01/08/2025 22:12:25 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 22:12:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 01/08/2025 22:10:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 22:10:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 01/08/2025 22:09:11 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-MICROSOFT.OFFICE.ONENOTE Information 01/08/2025 22:09:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 37 keys and creating 3 modified pages. Information 01/08/2025 22:09:06 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-MICROSOFT.OFFICE.ONENOTE Information 01/08/2025 22:09:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_16001.14326.22594.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 22:08:58 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 01/08/2025 22:08:25 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 22:06:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 22:04:25 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 22:02:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 22:00:25 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 21:58:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 21:58:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000012). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:58:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 01/08/2025 21:57:34 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy22) is healthy. No action is needed. Warning 01/08/2025 21:56:26 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 01/08/2025 21:56:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 01/08/2025 21:56:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000012). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:56:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000F). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:56:07 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000F). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:56:07 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000072000000A). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000072000000A). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000E). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000E). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000D). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000D). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000B). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000B). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:29 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000A). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:29 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000A). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000011). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000011). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000004). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000004). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000010). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000010). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:55:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 01/08/2025 21:54:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 01/08/2025 21:54:41 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 21:54:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000B). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:26 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000B). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:26 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000062000000A). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000062000000A). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000D). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000D). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000C). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000C). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000B). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000B). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:54:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000A). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000A). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:51 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 01/08/2025 21:53:50 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 01/08/2025 21:53:48 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy21) is healthy. No action is needed. Information 01/08/2025 21:53:48 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 01/08/2025 21:53:46 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 01/08/2025 21:53:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2507.59091.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:53:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000009). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:40 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint Information 01/08/2025 21:53:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint Information 01/08/2025 21:53:37 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000009). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:53:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2506.91.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:53:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 01/08/2025 21:53:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:53:27 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather Information 01/08/2025 21:53:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 01/08/2025 21:53:23 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather Information 01/08/2025 21:53:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:53:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.54.63026.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 01/08/2025 21:53:12 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. Information 01/08/2025 21:53:11 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 01/08/2025 21:53:11 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:53:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2530.2.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:53:09 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4NNS1-Microsoft.DesktopAppInstaller Information 01/08/2025 21:53:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy20) is healthy. No action is needed. Warning 01/08/2025 21:53:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 01/08/2025 21:52:59 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:52:54 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 01/08/2025 21:52:50 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 01/08/2025 21:52:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25062.33.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:52:46 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 01/08/2025 21:52:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 01/08/2025 21:52:34 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:52:29 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch Information 01/08/2025 21:52:28 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy19) is healthy. No action is needed. Warning 01/08/2025 21:52:25 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 21:52:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 01/08/2025 21:52:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 01/08/2025 21:52:13 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 01/08/2025 21:51:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.26.430.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:51:52 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:51:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2506.25.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:51:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22506.1401.9.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 01/08/2025 21:51:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:51:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:51:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 01/08/2025 21:50:56 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎01T20:50:56.456997300Z from ‎2025‎-‎08‎-‎01T20:50:56.456492800Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎01T21:50:56.456997300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 01/08/2025 21:50:56 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 01/08/2025 21:50:56 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎01T20:50:56.455666800Z from ‎2025‎-‎08‎-‎01T20:50:48.050024100Z. Time Delta: 8405 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎08‎-‎01T21:50:56.455666800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 01/08/2025 21:50:56 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 01/08/2025 21:50:36 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was reorganized with a starting size of 15933440 bytes and an ending size of 10973184 bytes. Warning 01/08/2025 21:50:32 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 01/08/2025 21:50:32 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 01/08/2025 21:50:19 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 60878848 bytes and an ending size of 59457536 bytes. Warning 01/08/2025 21:49:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 01/08/2025 21:49:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 01/08/2025 21:49:52 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 01/08/2025 21:49:50 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎28T21:09:17.084465800Z Wake Time: ‎2025‎-‎08‎-‎01T20:49:49.690802600Z Wake Source: Unknown" Warning 01/08/2025 21:49:50 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 01/08/2025 21:49:50 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 01/08/2025 21:49:50 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 14 to 16. Reason Unknown BootId: 146" Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000007. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000007). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000007). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000007. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000009. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000009). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000009). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000009. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000F. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000000F). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000000F). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000F. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000008. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000008). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000008). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000008. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000007. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000007). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000007). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 01/08/2025 21:49:49 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000007. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 01/08/2025 21:49:49 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 01/08/2025 21:49:49 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 13 to 14. Reason SxTransition BootId: 146" Information 01/08/2025 21:49:49 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 01/08/2025 21:49:49 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 01/08/2025 21:49:49 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 01/08/2025 21:49:49 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 01/08/2025 21:49:47 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎08‎-‎01T20:49:47.500000000Z from ‎2025‎-‎07‎-‎28T21:09:19.624649400Z. Time Delta: 344427875 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎08‎-‎01T21:49:47.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 22:09:19 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 01/08/2025 21:49:47 EventLog 6013 None The system uptime is 363156 seconds. Information 28/07/2025 22:09:19 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 28/07/2025 22:09:17 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 28/07/2025 22:09:17 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T21:09:17.109766500Z from ‎2025‎-‎07‎-‎28T21:09:17.108994800Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 13528). RTC time: ‎2025‎-‎07‎-‎28T22:09:17.109766500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 22:09:17 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 22:09:17 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 12 to 13. Reason Unknown BootId: 146" Information 28/07/2025 22:09:17 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 28/07/2025 22:09:16 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 28/07/2025 22:09:14 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 28/07/2025 22:09:14 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 28/07/2025 22:06:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 22:02:53 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 21:59:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:59:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 21:59:03 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy18) is healthy. No action is needed. Information 28/07/2025 21:59:02 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 21:57:11 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 21:57:11 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 28/07/2025 21:57:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 21:57:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 21:57:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:57:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000002000000E). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000002000000E). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:40 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:40 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 21:56:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 21:56:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000004). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000004). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:56:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 21:55:51 Microsoft-Windows-Time-Service 35 None The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. Information 28/07/2025 21:55:35 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 28/07/2025 21:55:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 21:54:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 21:54:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 21:54:54 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 28/07/2025 21:54:53 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎28T17:05:01.409118700Z Wake Time: ‎2025‎-‎07‎-‎28T20:54:52.684574900Z Wake Source: Unknown" Warning 28/07/2025 21:54:53 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 21:54:53 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 28/07/2025 21:54:53 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 146" Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000000D). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000000D). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000D. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000000C). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000000C). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000C. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000000B). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000000B). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000B. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000006. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000006). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000006). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000006. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000004). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000004). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 21:54:52 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 21:54:52 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 28/07/2025 21:54:52 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 146" Information 28/07/2025 21:54:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 21:54:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 21:54:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 28/07/2025 21:54:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 21:54:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T20:54:50.500000000Z from ‎2025‎-‎07‎-‎28T17:05:04.068757600Z. Time Delta: 13786431 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎28T21:54:50.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 18:05:04 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 28/07/2025 18:05:03 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 28/07/2025 18:05:01 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 28/07/2025 18:05:01 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 146" Information 28/07/2025 18:05:01 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 28/07/2025 18:05:01 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 28/07/2025 18:04:58 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 28/07/2025 18:04:06 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 18:04:06 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 28/07/2025 18:04:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 18:03:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 18:02:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 28/07/2025 18:02:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 18:02:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 28/07/2025 18:02:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 18:02:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 18:02:18 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 28/07/2025 18:02:17 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎28T16:49:46.925359700Z Wake Time: ‎2025‎-‎07‎-‎28T17:02:16.686659900Z Wake Source: Unknown" Warning 28/07/2025 18:02:17 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 18:02:17 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000005). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000004). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000004). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000002000000A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE0000002000000A). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE0000002000000A). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000002000000A. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000009. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000009). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000009). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000009. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000003. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000220000003). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 18:02:17 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 146" Information 28/07/2025 18:02:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 5 to 6. Reason SxTransition BootId: 146" Information 28/07/2025 18:02:16 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 18:02:16 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 18:02:16 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 28/07/2025 18:02:16 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 18:02:14 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T17:02:14.500000000Z from ‎2025‎-‎07‎-‎28T16:49:48.567617900Z. Time Delta: 745932 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎28T18:02:14.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 17:49:48 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 28/07/2025 17:49:48 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:49:48 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 28/07/2025 17:49:47 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 28/07/2025 17:49:46 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 4 to 5. Reason Unknown BootId: 146" Information 28/07/2025 17:49:46 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 28/07/2025 17:49:46 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 28/07/2025 17:49:44 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 28/07/2025 17:49:44 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 28/07/2025 17:49:39 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 28/07/2025 17:49:16 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Information 28/07/2025 17:49:16 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 17:48:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000008). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000008). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000007). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000007). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000006). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000006). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:48:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000004). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:47:23 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 17:47:23 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 28/07/2025 17:47:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000004). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:47:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 17:47:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:47:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:47:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 28/07/2025 17:46:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:45:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:45:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 28/07/2025 17:45:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:45:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:45:15 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 28/07/2025 17:45:13 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎28T16:42:44.279514500Z Wake Time: ‎2025‎-‎07‎-‎28T16:45:12.751849900Z Wake Source: Unknown" Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000120000002). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000004). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000004. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000720000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFC00000720000002). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFC00000720000002). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000720000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000620000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFC00000620000002). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFC00000620000002). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000620000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000003. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000020000003). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000003. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:45:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) from URL group (0xFE00000320000002). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 17:45:13 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 17:45:13 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 28/07/2025 17:45:13 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 2 to 4. Reason Unknown BootId: 146" Information 28/07/2025 17:45:12 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 1 to 2. Reason SxTransition BootId: 146" Information 28/07/2025 17:45:12 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 17:45:12 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 17:45:12 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 28/07/2025 17:45:12 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 17:45:10 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T16:45:10.500000000Z from ‎2025‎-‎07‎-‎28T16:42:50.746009500Z. Time Delta: 139753 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎28T17:45:10.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 17:42:50 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 28/07/2025 17:42:50 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 28/07/2025 17:42:44 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 28/07/2025 17:42:44 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 0 to 1. Reason ScreenOffGracePeriod BootId: 146" Information 28/07/2025 17:42:44 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 28/07/2025 17:42:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 28/07/2025 17:42:41 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 28/07/2025 17:42:33 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (PATRE-DESKTOP) has initiated the power off of computer PATRE-DESKTOP on behalf of user PATRE-DESKTOP\Rupesh Patre for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Warning 28/07/2025 17:40:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:40:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:39:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:39:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:38:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:36:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:36:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:34:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 28/07/2025 17:33:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:32:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:31:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:31:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:31:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 17:31:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:16:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 28/07/2025 17:09:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:03:59 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Warning 28/07/2025 17:03:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:03:16 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 28/07/2025 17:03:16 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 28/07/2025 17:02:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 17:02:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000620000001). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:02:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 17:00:17 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy15) is healthy. No action is needed. Information 28/07/2025 17:00:17 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 17:00:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000620000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000005). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000005). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000004). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 17:00:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000720000001). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000720000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 16:59:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscBrokerManager and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 16:59:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 16:59:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 28/07/2025 16:59:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:59:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 16:58:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 16:57:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 16:57:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Warning 28/07/2025 16:57:43 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:57:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2025-07 Cumulative Update Preview for Windows 11 Version 24H2 for x64-based Systems (KB5062660) (26100.4770) Information 28/07/2025 16:57:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/66ca5b32-5481-4a2e-90aa-d95d84174472/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000002. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/e6c69c23-7496-400e-a260-b2a77be20f40/) from URL group (0xFE00000220000001). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:36 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/e6c69c23-7496-400e-a260-b2a77be20f40/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:36 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/d300c310-5c97-4069-babb-8ded903fc836/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000001. Status 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/3f34c644-d0c6-436d-98d0-e236acb7b84a/) from URL group (0xFE00000120000001). Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000001. Status 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:35 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/cb46dec8-d515-45bd-9a77-524418f513d6/) from URL group (0xFE00000320000001). Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Warning 28/07/2025 16:57:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 16:57:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 16:57:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Information 28/07/2025 16:57:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/3f34c644-d0c6-436d-98d0-e236acb7b84a/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:32 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x798 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 16:57:31 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 28/07/2025 16:57:31 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 16:57:31 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Warning 28/07/2025 16:57:27 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:57:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 28/07/2025 16:57:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/cb46dec8-d515-45bd-9a77-524418f513d6/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:24 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000001. Status 0x0. Process Id 0xDDC Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xF38 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000001. Status 0x0. Process Id 0xF38 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:22 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:57:21 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 28/07/2025 16:57:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 28/07/2025 16:57:21 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 28/07/2025 16:57:21 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) unloaded successfully. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2028‎-‎09‎-‎07T04:23:58.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:20 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 28/07/2025 16:57:20 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 28/07/2025 16:57:20 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 28/07/2025 16:57:20 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 28/07/2025 16:57:20 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 28/07/2025 16:57:20 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 28/07/2025 16:57:20 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 28/07/2025 16:57:20 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 28/07/2025 16:57:20 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 28/07/2025 16:57:16 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume5) is healthy. No action is needed. Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 16:57:13 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 28/07/2025 16:57:13 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 28/07/2025 16:57:13 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:57:12 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:12 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:11 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 28/07/2025 16:57:11 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:11 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:11 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:11 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:57:10 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎07‎-‎28T15:57:10.500000000Z. Loader time: ‎2025‎-‎07‎-‎28T15:57:09.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 28/07/2025 16:57:10 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎07‎-‎28T15:57:10.500000000Z. Information 28/07/2025 16:50:56 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎07‎-‎28T15:50:56.980117300Z. Information 28/07/2025 16:50:56 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 28/07/2025 16:50:56 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Shutdown Event Code: 0x0 Reason: Kernel API" Information 28/07/2025 16:50:52 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:50:52 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000020000001). Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/bcc8a895-0ea4-4ee7-835c-357a00c35904/) from URL group (0xFE00000220000001). Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:50:51 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000002. Status 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:50:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/089d5452-59c1-42d0-9b77-4ecb5aa75300/) from URL group (0xFE00000120000002). Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:57:21 EventLog 6013 None The system uptime is 11 seconds. Information 28/07/2025 16:57:21 EventLog 6005 None The Event log service was started. Information 28/07/2025 16:57:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 28/07/2025 16:50:51 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 28/07/2025 16:50:51 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 28/07/2025 16:50:51 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 28/07/2025 16:50:51 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 28/07/2025 16:50:51 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 28/07/2025 16:50:51 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Error 28/07/2025 16:50:50 Microsoft-Windows-DistributedCOM 10005 None "DCOM got error ""1115"" attempting to start the service TrustedInstaller with arguments ""Unavailable"" in order to run the server: {752073A1-23F2-4396-85F0-8FDB879ED0ED}" Information 28/07/2025 16:50:51 EventLog 6006 None The Event log service was stopped. Information 28/07/2025 16:50:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\State\dosvcState.dat was cleared updating 29 keys and creating 7 modified pages. Information 28/07/2025 16:50:49 User32 1074 None "The process C:\WINDOWS\system32\winlogon.exe (PATRE-DESKTOP) has initiated the shutdown of computer PATRE-DESKTOP on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: shutdown Comment: " Information 28/07/2025 16:50:49 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 28/07/2025 16:50:49 Virtual Disk Service 4 None Service stopped. Information 28/07/2025 16:50:12 Microsoft-Windows-WinREAgent 4501 None Servicing succeeded. The Windows Recovery Environment version is now: 10.0.26100.4762 Information 28/07/2025 16:50:05 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully added. Information 28/07/2025 16:50:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0xABC Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4765_none_a506664b77649b7e\TiWorker.exe, User SYSTEM Information 28/07/2025 16:50:05 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully added. Information 28/07/2025 16:50:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0xABC Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4765_none_a506664b77649b7e\TiWorker.exe, User SYSTEM Information 28/07/2025 16:50:05 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully added. Information 28/07/2025 16:50:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0xABC Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4765_none_a506664b77649b7e\TiWorker.exe, User SYSTEM Information 28/07/2025 16:50:05 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:3387/rdp/ was successfully added. Information 28/07/2025 16:50:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0xABC Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4765_none_a506664b77649b7e\TiWorker.exe, User SYSTEM Information 28/07/2025 16:50:05 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:3392/rdp/ was successfully added. Information 28/07/2025 16:50:05 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0xABC Executable path \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4765_none_a506664b77649b7e\TiWorker.exe, User SYSTEM Information 28/07/2025 16:50:05 Virtual Disk Service 3 None Service started. Information 28/07/2025 16:49:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.13.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.78.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.197.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57074914.Livtop_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57074904.InpApp_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57058570.Speion_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.56978801.Voiess_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.54792954.Filons_1000.26100.4768.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.540.2204.100_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 16:49:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 16:49:21 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:3387/rdp/ was successfully deleted. Information 28/07/2025 16:49:21 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:3392/rdp/ was successfully deleted. Information 28/07/2025 16:49:21 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully deleted. Information 28/07/2025 16:49:21 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully deleted. Information 28/07/2025 16:49:21 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully deleted. Information 28/07/2025 16:49:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/bcc8a895-0ea4-4ee7-835c-357a00c35904/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 28/07/2025 16:49:15 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/985d144b-6374-487c-8085-cd4b16148e94/) from URL group (0xFC00000020000001). Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/089d5452-59c1-42d0-9b77-4ecb5aa75300/) to URL group (0xFE00000120000002). Status: 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000002. Status 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000001. Status 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/a0fe45b8-c108-4320-967b-648d51695d1e/) from URL group (0xFE00000120000001). Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 3606 keys and creating 1198 modified pages. Information 28/07/2025 16:49:13 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass uiomap" Warning 28/07/2025 16:49:07 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:49:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/a0fe45b8-c108-4320-967b-648d51695d1e/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000001. Status 0x0. Process Id 0xD54 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/985d144b-6374-487c-8085-cd4b16148e94/) to URL group (0xFC00000020000001). Status: 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000620000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/7d2dedab-a220-4e56-83c0-8a0c64363672/) from URL group (0xFF00000620000001). Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:03 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000020000001. Status 0x0. Process Id 0xEC8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/7d2dedab-a220-4e56-83c0-8a0c64363672/) to URL group (0xFF00000620000001). Status: 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000620000001. Status 0x0. Process Id 0x758 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-HttpService 112 HTTP Setup Trace Task Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User SYSTEM Information 28/07/2025 16:49:02 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 28/07/2025 16:49:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 28/07/2025 16:49:02 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 28/07/2025 16:49:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 6 None File System Filter 'virtual_file' (6.3, ‎2020‎-‎09‎-‎30T09:41:04.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2032‎-‎10‎-‎09T07:28:18.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2021‎-‎03‎-‎19T11:47:34.000000000Z) has successfully loaded and registered with Filter Manager. Warning 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Warning 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 11 None "File System Filter 'file_protector' (Version 6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) does not support bypass IO. Supported features: 0x4." Information 28/07/2025 16:49:02 Microsoft-Windows-FilterManager 6 None File System Filter 'file_protector' (6.3, ‎2021‎-‎06‎-‎07T09:49:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'UnionFS' (10.0, ‎2047‎-‎02‎-‎21T12:01:20.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) unloaded successfully. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2067‎-‎09‎-‎21T03:58:54.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2105‎-‎10‎-‎05T06:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2053‎-‎03‎-‎11T05:36:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-FilterManager 6 None File System Filter 'bfs' (10.0, ‎2028‎-‎09‎-‎07T04:23:58.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:49:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 218 keys and creating 20 modified pages. Information 28/07/2025 16:49:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 301 keys and creating 66 modified pages. Warning 28/07/2025 16:49:00 BTHUSB 28 None The local adapter does not support Bluetooth Low Energy. Warning 28/07/2025 16:49:00 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 16:49:00 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 28/07/2025 16:49:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 234 keys and creating 20 modified pages. Information 28/07/2025 16:49:00 Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 28/07/2025 16:49:00 Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 28/07/2025 16:49:00 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 28/07/2025 16:49:00 LsaSrv 6156 None "Credential Guard auto enablement status. Hardware Requirements for Virtualization Based Security: 1 Domain Joined: 0 Azure AD Joined: 0 Licensed for Credential Guard: 0 Domain Controller: 0" Information 28/07/2025 16:49:00 Microsoft-Windows-Wininit 12 None LSASS.exe was started as a protected process with level: 4. Information 28/07/2025 16:49:00 Microsoft-Windows-Wininit 14 None "Credential Guard configuration: Registry Configuration: 0x0 Test Configuration: 0 Auto Enablement: 0" Information 28/07/2025 16:49:00 Microsoft-Windows-Wininit 23 None "Boot App Anti-Rollback: Initialize Completed with status: HRESULT: The operation completed successfully. New timer needed: false New timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false " Information 28/07/2025 16:49:00 Microsoft-Windows-Wininit 25 None "Boot App Anti-Rollback: Previous timer resumed with status: HRESULT: The operation completed successfully. Previous timer present: false Start time: ‎1601‎-‎01‎-‎01T00:00:00.000000000Z Grace period: 0 Attempted recovery enforcement succeeded: false " Information 28/07/2025 16:49:00 Microsoft-Windows-Wininit 19 None "Virtualization Based Security new timer creation status HRESULT: The operation completed successfully. New latch timer needed: false New latch timer waiting for system update completion: false Previous latch timer exists but disabled by registry: false Policy file exists: false " Information 28/07/2025 16:48:54 Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume5) is healthy. No action is needed. Information 28/07/2025 16:48:51 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 16:48:51 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 145846272 bytes and an ending size of 139472896 bytes. Information 28/07/2025 16:48:48 MEIx64 2 None Intel(R) Management Engine Interface driver has started successfully. Information 28/07/2025 16:48:48 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-b0b6e8000000} (\Device\HarddiskVolume3) is healthy. No action is needed. Information 28/07/2025 16:48:48 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{e5e23221-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 3801 Maximum performance percentage: 100 Minimum performance percentage: 42 Minimum throttle percentage: 5" Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 954 keys and creating 128 modified pages. Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 16:48:48 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 28/07/2025 16:48:48 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎1978‎-‎05‎-‎14T10:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'UCPD' (10.0, ‎2007‎-‎02‎-‎05T06:30:28.000000000Z) has successfully loaded and registered with Filter Manager. Warning 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 11 None "File System Filter 'ngscan' (Version 6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) does not support bypass IO. Supported features: 0x7." Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'ngscan' (6.3, ‎2021‎-‎03‎-‎12T14:13:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'KLIF' (10.0, ‎2024‎-‎02‎-‎29T15:12:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2075‎-‎08‎-‎31T23:07:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'klbackupflt' (10.0, ‎2021‎-‎12‎-‎18T17:18:09.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'file_tracker' (6.3, ‎2020‎-‎09‎-‎30T09:09:22.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2033‎-‎09‎-‎03T00:41:44.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2093‎-‎04‎-‎02T02:29:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:47 Microsoft-Windows-FilterManager 6 None File System Filter 'WinSetupMon' (10.0, ‎2080‎-‎03‎-‎12T22:59:38.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 16:48:46 Microsoft-Windows-HAL 16 None IOMMU fault reporting has been initialized. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-General 25 (12) "The system time was initialized to ‎2025‎-‎07‎-‎28T15:48:45.500000000Z. Loader time: ‎2025‎-‎07‎-‎28T15:48:45.000000000Z Internal boot flags: 0x2 HAL RTC error code: 0x0 RTC time is in UTC: false Soft boot: false Success: true Phase: 0" Information 28/07/2025 16:48:46 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2025‎-‎07‎-‎28T15:48:45.500000000Z. Information 28/07/2025 16:48:01 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2025‎-‎07‎-‎28T15:48:01.020793000Z. Information 28/07/2025 16:48:00 Microsoft-Windows-Kernel-Power 577 (280) The system has prepared for a system initiated reboot from Active. Information 28/07/2025 16:47:59 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Action: Power Action Reboot Event Code: 0x0 Reason: Kernel API" Information 28/07/2025 16:47:55 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000020000001. Status 0x0. Process Id 0xEE8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:47:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/ad5d7299-db0e-4d61-8de9-4d4eb59b92fe/) from URL group (0xFE00000020000001). Process Id 0xEE8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 16:47:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000001D. Status 0x0. Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:47:54 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000520000001. Status 0x0. Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:47:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/85409266-1663-453f-bdd7-2359164bd0ea/) from URL group (0xFE0000012000001D). Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 28/07/2025 16:49:02 EventLog 6013 None The system uptime is 16 seconds. Information 28/07/2025 16:49:02 EventLog 6005 None The Event log service was started. Information 28/07/2025 16:49:02 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 26100 Multiprocessor Free. Information 28/07/2025 16:47:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 28/07/2025 16:47:54 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 28/07/2025 16:47:54 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 28/07/2025 16:47:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 28/07/2025 16:47:54 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 28/07/2025 16:47:54 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 28/07/2025 16:47:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T15:47:54.419529500Z from ‎2025‎-‎07‎-‎28T15:47:54.412515400Z. Time Delta: 7 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎28T16:47:54.419529500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 16:47:54 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 16:47:54 EventLog 6006 None The Event log service was stopped. Information 28/07/2025 16:44:39 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 28/07/2025 16:44:37 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 28/07/2025 16:44:37 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 28/07/2025 16:43:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 28/07/2025 16:36:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 16:34:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 16:23:22 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy52) is healthy. No action is needed. Information 28/07/2025 16:20:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenub_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\8eb37732c02a75ce_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenua_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a74c416bf60c1d4d_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\1a3d166a039ff703_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 4 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Copilot_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\DropboxInc.Dropbox_wkt425jdc3sga\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\33c6a9c110a8c9ee_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:47:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Information 28/07/2025 15:47:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_d9ma7nkbkv4rp\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\47b86fda953346a8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 15:22:49 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy51) is healthy. No action is needed. Information 28/07/2025 15:02:03 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-MICROSOFT.PEOPLE Information 28/07/2025 15:02:01 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 14:33:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 14:31:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 14:22:19 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy50) is healthy. No action is needed. Information 28/07/2025 13:21:47 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy49) is healthy. No action is needed. Information 28/07/2025 13:19:36 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{5A507B69-C6A3-4374-80FF-4A4D0DBDD175} was reorganized with a starting size of 141848576 bytes and an ending size of 131309568 bytes. Information 28/07/2025 13:19:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{E4D2CB89-D60E-4729-8E44-2AB0C69774B8} was cleared updating 925 keys and creating 127 modified pages. Information 28/07/2025 13:19:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{5DE1B0FB-498C-4B25-A853-4D946E2C3AF3} was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 13:19:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{2534DD94-18A4-4D37-9321-DEC18E69D531} was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 13:19:31 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{7A511745-8FAF-4C81-AE3C-0507C8B025F4} was reorganized with a starting size of 71270400 bytes and an ending size of 70860800 bytes. Information 28/07/2025 13:19:27 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy39\WINDOWS\System32\config\DRIVERS (TM: {13a46e93-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e92-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:19:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy39\WINDOWS\System32\config\DRIVERS was cleared updating 34264 keys and creating 1616 modified pages. Information 28/07/2025 13:19:27 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy39\WINDOWS\System32\config\SYSTEM (TM: {13a46e90-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e8f-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:19:27 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy39\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 71270400 bytes and an ending size of 70860800 bytes. Information 28/07/2025 13:19:13 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{28A22EAD-85B2-460F-99E8-30BAC249C23A} was reorganized with a starting size of 141848576 bytes and an ending size of 131309568 bytes. Information 28/07/2025 13:19:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{FCBFB028-F18D-4AD8-9A48-A011C3572968} was cleared updating 925 keys and creating 127 modified pages. Information 28/07/2025 13:19:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{1E34DFA0-7E50-4592-BEC5-E0FE31843983} was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 13:19:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{97A5FDC6-AC9B-4350-B953-7ABCD70AC3C3} was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 13:19:08 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{E024DFF2-862D-40BE-8C45-F3DF26495C89} was reorganized with a starting size of 71270400 bytes and an ending size of 70852608 bytes. Information 28/07/2025 13:19:04 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy41\WINDOWS\System32\config\DRIVERS (TM: {13a46e6d-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e6c-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:19:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy41\WINDOWS\System32\config\DRIVERS was cleared updating 34264 keys and creating 1616 modified pages. Information 28/07/2025 13:19:04 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy41\WINDOWS\System32\config\SYSTEM (TM: {13a46e6a-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e69-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:19:04 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy41\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 71270400 bytes and an ending size of 70852608 bytes. Information 28/07/2025 13:18:50 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{26C7F702-EF83-4114-8569-A87A27B52AA0} was reorganized with a starting size of 141848576 bytes and an ending size of 131309568 bytes. Information 28/07/2025 13:18:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{276C2F1C-D4F2-44F7-ADBB-6FC8DD917E3C} was cleared updating 925 keys and creating 127 modified pages. Information 28/07/2025 13:18:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{639AA8EF-8033-437C-A86F-87DFF8EAC444} was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 13:18:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{E3862C8B-6A11-4CBF-816B-84E6CE3A0958} was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 13:18:44 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{31419A7F-B2E4-4F4B-B52E-9A4B1492C894} was reorganized with a starting size of 71270400 bytes and an ending size of 70848512 bytes. Information 28/07/2025 13:18:41 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy40\WINDOWS\System32\config\DRIVERS (TM: {13a46e46-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e45-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy40\WINDOWS\System32\config\DRIVERS was cleared updating 34264 keys and creating 1616 modified pages. Information 28/07/2025 13:18:40 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy40\WINDOWS\System32\config\SYSTEM (TM: {13a46e43-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e42-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:40 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy40\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 71270400 bytes and an ending size of 70848512 bytes. Information 28/07/2025 13:18:37 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{A12C9A6D-953B-4E4F-BD63-EC03672B80ED} was reorganized with a starting size of 142127104 bytes and an ending size of 129986560 bytes. Information 28/07/2025 13:18:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{D289B411-8E38-4C1B-9CA0-0ECFDD64565D} was cleared updating 925 keys and creating 126 modified pages. Information 28/07/2025 13:18:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{D738DEF9-7C42-415C-8533-4C89BB7646CE} was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 13:18:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{E63EC220-E49A-4347-A261-B33D68541B38} was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 13:18:32 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{8AC5E16C-A513-40BC-B970-72AC906E9488} was reorganized with a starting size of 71270400 bytes and an ending size of 70864896 bytes. Information 28/07/2025 13:18:28 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy42\WINDOWS\System32\config\DRIVERS (TM: {13a46e1c-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e1b-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:28 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy42\WINDOWS\System32\config\SYSTEM (TM: {13a46e19-6717-11f0-9d52-3c52a1296d91}, RM: {13a46e18-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:28 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy42\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 71270400 bytes and an ending size of 70864896 bytes. Information 28/07/2025 13:18:24 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{1E59F914-A5FE-4BBD-8F22-840A9BED4CA8} was reorganized with a starting size of 142127104 bytes and an ending size of 129990656 bytes. Information 28/07/2025 13:18:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{9512865A-11F7-41A8-BAB8-DB963A30A6EA} was cleared updating 925 keys and creating 126 modified pages. Information 28/07/2025 13:18:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{EBB9802F-780C-4FDD-BD7F-9118D2D9E1C3} was cleared updating 89 keys and creating 5 modified pages. Information 28/07/2025 13:18:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{ACDBB41B-A31A-48CE-9082-98B254FAAD40} was cleared updating 73 keys and creating 9 modified pages. Information 28/07/2025 13:18:19 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{B4348E2E-71BD-4C2E-B18D-FAA61AEA5FD0} was reorganized with a starting size of 71270400 bytes and an ending size of 70864896 bytes. Information 28/07/2025 13:18:15 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy43\WINDOWS\System32\config\DRIVERS (TM: {13a46df3-6717-11f0-9d52-3c52a1296d91}, RM: {13a46df2-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:15 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy43\WINDOWS\System32\config\SYSTEM (TM: {13a46df0-6717-11f0-9d52-3c52a1296d91}, RM: {13a46def-6717-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 28/07/2025 13:18:15 Microsoft-Windows-Kernel-General 15 (10) Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy43\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 71270400 bytes and an ending size of 70864896 bytes. Warning 28/07/2025 12:32:17 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 28/07/2025 12:31:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 28/07/2025 12:30:33 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 28/07/2025 12:28:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 28/07/2025 12:28:17 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 28/07/2025 12:26:33 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 28/07/2025 12:24:17 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 28/07/2025 12:22:33 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 28/07/2025 12:21:29 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy48) is healthy. No action is needed. Warning 28/07/2025 12:20:18 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 28/07/2025 12:18:33 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Warning 28/07/2025 12:16:13 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 28/07/2025 12:11:28 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy47) is healthy. No action is needed. Warning 28/07/2025 12:09:00 disk 153 None The IO operation at logical block address 0x7e35de10 for Disk 1 (PDO name: \Device\0000004a) was retried. Information 28/07/2025 12:00:00 EventLog 6013 None The system uptime is 1430222 seconds. Warning 28/07/2025 11:24:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name perr.brightvpn.com timed out after none of the configured DNS servers responded. Client PID 12856. Information 28/07/2025 11:20:33 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy46) is healthy. No action is needed. Information 28/07/2025 11:20:32 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 11:15:14 Virtual Disk Service 4 None Service stopped. Information 28/07/2025 11:04:31 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVFW-Microsoft.BingNews Information 28/07/2025 11:04:28 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:50:54 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 28/07/2025 10:50:20 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 28/07/2025 10:49:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 26 keys and creating 6 modified pages. Information 28/07/2025 10:49:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 2 modified pages. Warning 28/07/2025 10:48:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:44:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 10:44:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:43:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 10 keys and creating 1 modified pages. Information 28/07/2025 10:43:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 14 keys and creating 3 modified pages. Information 28/07/2025 10:42:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 10:31:41 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 28/07/2025 10:31:03 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 28/07/2025 10:30:53 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Warning 28/07/2025 10:30:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:30:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 10:27:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 10:26:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\system32\smi\store\Machine\schema.dat was cleared updating 83 keys and creating 16 modified pages. Information 28/07/2025 10:26:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Users\Default\ntuser.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:26:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\DEFAULT was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:26:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\DRIVERS was cleared updating 341 keys and creating 36 modified pages. Information 28/07/2025 10:26:46 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\COMPONENTS was reorganized with a starting size of 8937472 bytes and an ending size of 7036928 bytes. Information 28/07/2025 10:26:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SAM was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:26:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SECURITY was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:26:45 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\$WinREAgent\Scratch\Mount\Windows\System32\config\SYSTEM was reorganized with a starting size of 7307264 bytes and an ending size of 7262208 bytes. Information 28/07/2025 10:26:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\$WinREAgent\Scratch\Mount\Windows\system32\config\SOFTWARE was cleared updating 39604 keys and creating 2699 modified pages. Information 28/07/2025 10:26:01 Microsoft-Windows-FilterManager 6 None File System Filter 'WIMMount' (10.0, ‎2097‎-‎11‎-‎16T18:39:24.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 10:25:57 Microsoft-Windows-WinREAgent 4500 None Starting Windows Recovery Environment servicing. Information 28/07/2025 10:25:56 Virtual Disk Service 3 None Service started. Information 28/07/2025 10:24:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2025-07 Cumulative Update Preview for Windows 11 Version 24H2 for x64-based Systems (KB5062660) (26100.4770) Information 28/07/2025 10:24:57 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay Information 28/07/2025 10:24:56 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:22:34 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 28/07/2025 10:22:34 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 28/07/2025 10:22:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:20:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 28/07/2025 10:20:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:20:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:20:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 4 keys and creating 1 modified pages. Information 28/07/2025 10:20:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 11 keys and creating 2 modified pages. Information 28/07/2025 10:19:41 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy45) is healthy. No action is needed. Information 28/07/2025 10:19:41 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Warning 28/07/2025 10:19:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:18:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000013). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:18:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 28/07/2025 10:16:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:16:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000013). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000120000002). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000120000002). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000062000000E). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000062000000E). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000023). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:09 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000023). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:09 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000014). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:16:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 28/07/2025 10:15:51 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000014). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:15:51 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000062000000D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:15:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000062000000D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:15:42 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 10:15:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 28/07/2025 10:13:13 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 28/07/2025 10:13:09 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy44) is healthy. No action is needed. Information 28/07/2025 10:13:09 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 28/07/2025 10:13:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:13:04 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 28/07/2025 10:12:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2507.56041.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 28/07/2025 10:12:57 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 28/07/2025 10:12:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Information 28/07/2025 10:12:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25061.51.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 10:12:48 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 28/07/2025 10:12:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 21 keys and creating 8 modified pages. Information 28/07/2025 10:12:46 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 28/07/2025 10:12:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2025.11070.8001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 28/07/2025 10:12:40 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:12:34 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 28/07/2025 10:12:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 31 keys and creating 4 modified pages. Information 28/07/2025 10:12:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy43) is healthy. No action is needed. Information 28/07/2025 10:12:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 28/07/2025 10:12:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 28/07/2025 10:11:57 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:11:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NG1H8B3ZC7M-Microsoft.MixedReality.Portal Information 28/07/2025 10:11:52 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy42) is healthy. No action is needed. Information 28/07/2025 10:11:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 28/07/2025 10:11:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\727ab963453f4768_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:11:17 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:11:17 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:11:17 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 28/07/2025 10:11:03 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 28/07/2025 10:11:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:10:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 28/07/2025 10:10:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T09:10:50.186068900Z from ‎2025‎-‎07‎-‎28T09:10:50.185348700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎28T10:10:50.186068900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 10:10:50 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 10:10:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T09:10:50.184523100Z from ‎2025‎-‎07‎-‎28T09:10:39.019008500Z. Time Delta: 11165 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎28T10:10:50.184523100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 28/07/2025 10:10:50 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 28/07/2025 10:10:23 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 28/07/2025 10:10:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 20 keys and creating 3 modified pages. Information 28/07/2025 10:10:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 28/07/2025 10:10:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\AC\GEH\POF.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:10:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 9 modified pages. Information 28/07/2025 10:10:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 28/07/2025 10:10:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 28/07/2025 10:10:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. Information 28/07/2025 10:10:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\89bc9879cd777c28_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:10:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 16 keys and creating 6 modified pages. Information 28/07/2025 10:10:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 12 keys and creating 4 modified pages. Information 28/07/2025 10:10:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:10:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\6b87ed64cdffbeb5_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 28/07/2025 10:10:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 28/07/2025 10:10:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1084 keys and creating 63 modified pages. Information 28/07/2025 10:10:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 4 modified pages. Warning 28/07/2025 10:09:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 28/07/2025 10:09:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 28/07/2025 10:09:46 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was reorganized with a starting size of 6565888 bytes and an ending size of 6447104 bytes. Information 28/07/2025 10:09:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\ntuser.dat was cleared updating 10364 keys and creating 1109 modified pages. Information 28/07/2025 10:09:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 28/07/2025 10:09:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 28/07/2025 10:09:42 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎23T21:11:15.991053000Z Wake Time: ‎2025‎-‎07‎-‎28T09:09:41.488659200Z Wake Source: Unknown" Warning 28/07/2025 10:09:42 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 28/07/2025 10:09:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000120000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000120000001). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000120000001). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000120000001. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000022. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000022). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000022). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000022. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000021. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000021). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000021). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000021. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000001B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000032000001B). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000032000001B). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000001B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000020. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000020). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000020). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:42 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000020. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 46 to 48. Reason Unknown BootId: 144" Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 98 keys and creating 8 modified pages. Warning 28/07/2025 10:09:41 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 45 to 46. Reason SxTransition BootId: 144" Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 28/07/2025 10:09:41 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 28/07/2025 10:09:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\config\DRIVERS was cleared updating 34264 keys and creating 1616 modified pages. Information 28/07/2025 10:09:38 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎28T09:09:38.500000000Z from ‎2025‎-‎07‎-‎23T21:11:19.464587700Z. Time Delta: 388699035 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎28T10:09:38.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/07/2025 22:11:19 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 28/07/2025 10:09:38 EventLog 6013 None The system uptime is 1423611 seconds. Information 23/07/2025 22:11:18 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 23/07/2025 22:11:16 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 23/07/2025 22:11:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 44 to 45. Reason Unknown BootId: 144" Information 23/07/2025 22:11:15 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 23/07/2025 22:11:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 23/07/2025 22:11:13 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5031 milliseconds. Warning 23/07/2025 22:11:13 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Information 23/07/2025 22:02:34 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 23/07/2025 22:02:26 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 23/07/2025 22:02:26 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 23/07/2025 22:00:59 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/85409266-1663-453f-bdd7-2359164bd0ea/) to URL group (0xFE0000012000001D). Status: 0x0. Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/07/2025 22:00:59 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000001D. Status 0x0. Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/07/2025 22:00:59 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/85409266-1663-453f-bdd7-2359164bd0ea/) from URL group (0xFE00000520000001). Process Id 0xDD0 Executable path \Device\HarddiskVolume2\Windows\System32\spoolsv.exe, User SYSTEM Information 23/07/2025 22:00:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/07/2025 21:57:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 23/07/2025 21:57:42 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice. Information 23/07/2025 21:57:42 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy41) is healthy. No action is needed. Information 23/07/2025 21:57:41 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Error 23/07/2025 21:57:25 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. Information 23/07/2025 21:57:16 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone Information 23/07/2025 21:57:16 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy40) is healthy. No action is needed. Information 23/07/2025 21:56:53 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 23/07/2025 21:56:47 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS Information 23/07/2025 21:56:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 23/07/2025 21:56:44 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS Information 23/07/2025 21:56:43 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy39) is healthy. No action is needed. Information 23/07/2025 21:56:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.25061.45.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 23/07/2025 21:56:09 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:55:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25062.30.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 23/07/2025 21:55:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_1.1.29.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 23/07/2025 21:55:42 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:55:42 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:55:42 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:55:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:48:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000001A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:48:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/07/2025 21:46:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000001A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000012). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000012). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000011). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:10 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000011). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000019). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:10 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000019). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:46:10 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000018). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:45:54 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000018). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:45:54 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000013). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/07/2025 21:45:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/07/2025 21:45:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000013). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:45:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 23/07/2025 21:45:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000012). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:45:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 23/07/2025 21:45:07 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy38) is healthy. No action is needed. Information 23/07/2025 21:43:33 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000012). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000062000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000062000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000012000001C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000012000001C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000010). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:28 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000010). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:28 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000010). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000010). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000001F). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000001F). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000001E). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:18 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 23/07/2025 21:43:18 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Information 23/07/2025 21:43:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000001E). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000062000000B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:14 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000062000000B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:14 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000F). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/07/2025 21:43:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/07/2025 21:43:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000F). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000017). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000017). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000001D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:01 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000001D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:43:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000011). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000011). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000062000000A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000062000000A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000F). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/07/2025 21:42:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/07/2025 21:42:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000F). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000E). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000E). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000012000001B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000012000001B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000012000001A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000012000001A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000E). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000E). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000019). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000019). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:08 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:42:08 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000001C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:41:19 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000001C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:41:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000001B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:41:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000001B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:41:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 23/07/2025 21:40:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/07/2025 21:40:44 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎23T20:40:44.850762500Z from ‎2025‎-‎07‎-‎23T20:40:44.850207500Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎23T21:40:44.850762500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/07/2025 21:40:44 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 23/07/2025 21:40:44 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎23T20:40:44.849192300Z from ‎2025‎-‎07‎-‎23T20:40:42.035672500Z. Time Delta: 2813 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎23T21:40:44.849192300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 23/07/2025 21:40:44 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 23/07/2025 21:40:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:40:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 23/07/2025 21:40:26 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 23/07/2025 21:39:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 23/07/2025 21:39:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 23/07/2025 21:39:47 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 23/07/2025 21:39:45 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎22T19:06:32.834506700Z Wake Time: ‎2025‎-‎07‎-‎23T20:39:44.493385000Z Wake Source: Unknown" Warning 23/07/2025 21:39:45 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 23/07/2025 21:39:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 42 to 44. Reason Unknown BootId: 144" Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000016. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000016). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000016). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000016. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000120000018). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000120000018). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC0000002000001A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC0000002000001A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC0000002000001A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC0000002000001A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000015. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000015). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000015). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000015. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000028. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFF00000120000028). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFF00000120000028). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 23/07/2025 21:39:44 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000028. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 23/07/2025 21:39:44 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 41 to 42. Reason SxTransition BootId: 144" Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 23/07/2025 21:39:44 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 23/07/2025 21:39:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎23T20:39:41.500000000Z from ‎2025‎-‎07‎-‎22T19:06:34.721491200Z. Time Delta: 91986778 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎23T21:39:41.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/07/2025 20:06:34 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 23/07/2025 21:39:41 EventLog 6013 None The system uptime is 1033017 seconds. Information 22/07/2025 20:06:34 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 22/07/2025 20:06:32 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 22/07/2025 20:06:32 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 40 to 41. Reason Unknown BootId: 144" Information 22/07/2025 20:06:32 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 22/07/2025 20:06:32 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 22/07/2025 20:06:24 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 22/07/2025 19:40:54 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy37) is healthy. No action is needed. Information 22/07/2025 18:46:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/07/2025 18:44:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/07/2025 18:40:16 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy36) is healthy. No action is needed. Information 22/07/2025 18:36:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/07/2025 18:34:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/07/2025 18:28:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 22/07/2025 18:24:35 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 22/07/2025 18:24:34 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 22/07/2025 18:24:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 22/07/2025 18:24:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 22/07/2025 17:39:52 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Service (GoogleUpdaterService140.0.7273.0) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe"" --system --windows-service --service=update Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 22/07/2025 17:39:40 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy35) is healthy. No action is needed. Information 22/07/2025 17:29:10 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 22/07/2025 17:29:07 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 22/07/2025 17:28:48 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 22/07/2025 17:28:48 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 22/07/2025 17:28:48 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 22/07/2025 17:28:48 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 22/07/2025 17:09:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/07/2025 17:07:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/07/2025 16:53:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 22/07/2025 16:53:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e382a49e584ad8f0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 22/07/2025 16:53:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 17 keys and creating 3 modified pages. Information 22/07/2025 16:53:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 9 keys and creating 2 modified pages. Information 22/07/2025 16:50:39 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NZKPSTSNW4P-Microsoft.XboxGamingOverlay Error 22/07/2025 16:50:38 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice. Information 22/07/2025 16:50:37 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice Information 22/07/2025 16:50:37 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NZKPSTSNW4P-Microsoft.XboxGamingOverlay Information 22/07/2025 16:50:37 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 22/07/2025 16:50:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_1.25062.29.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 22/07/2025 16:50:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGamingOverlay_7.325.7090.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 22/07/2025 16:50:16 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 22/07/2025 16:50:16 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 22/07/2025 16:46:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/07/2025 16:45:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/07/2025 16:43:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/07/2025 16:42:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 22/07/2025 16:40:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 22/07/2025 16:38:56 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy34) is healthy. No action is needed. Information 22/07/2025 16:36:49 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 22/07/2025 16:36:49 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 22/07/2025 16:36:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/07/2025 16:36:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/07/2025 16:35:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/07/2025 16:35:25 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎22T15:35:25.805010500Z from ‎2025‎-‎07‎-‎22T15:35:25.804693700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎22T16:35:25.805010500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/07/2025 16:35:25 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 22/07/2025 16:35:25 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎22T15:35:25.803640500Z from ‎2025‎-‎07‎-‎22T15:35:23.027899200Z. Time Delta: 2775 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎22T16:35:25.803640500Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 22/07/2025 16:35:25 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 22/07/2025 16:35:07 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 22/07/2025 16:34:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was cleared updating 15024 keys and creating 2535 modified pages. Information 22/07/2025 16:34:58 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 60862464 bytes and an ending size of 49815552 bytes. Information 22/07/2025 16:34:51 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Internal Service (GoogleUpdaterInternalService140.0.7273.0) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe"" --system --windows-service --service=update-internal Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 22/07/2025 16:34:44 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Service (GoogleUpdaterService140.0.7272.2) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.2\updater.exe"" --system --windows-service --service=update Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 22/07/2025 16:34:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\46f83413ee64154_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 22/07/2025 16:34:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 22/07/2025 16:34:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 22/07/2025 16:34:28 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 22/07/2025 16:34:26 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎21T16:42:14.959626200Z Wake Time: ‎2025‎-‎07‎-‎22T15:34:25.483041100Z Wake Source: Unknown" Warning 22/07/2025 16:34:26 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 22/07/2025 16:34:26 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 38 to 40. Reason Unknown BootId: 144" Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000019. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000019). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000019). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000019. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000018). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000018). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000017. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000017). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000017). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000017. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000017. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000120000017). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000120000017). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000017. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000009. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000620000009). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000620000009). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 22/07/2025 16:34:25 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000009. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 22/07/2025 16:34:25 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 37 to 38. Reason SxTransition BootId: 144" Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 22/07/2025 16:34:25 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 22/07/2025 16:34:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎22T15:34:22.500000000Z from ‎2025‎-‎07‎-‎21T16:42:17.696649600Z. Time Delta: 82324803 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎22T16:34:22.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/07/2025 17:42:17 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 22/07/2025 16:34:22 EventLog 6013 None The system uptime is 928301 seconds. Information 21/07/2025 17:42:15 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 21/07/2025 17:42:14 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 36 to 37. Reason Unknown BootId: 144" Information 21/07/2025 17:42:14 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 21/07/2025 17:42:14 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 21/07/2025 17:42:13 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5047 milliseconds. Warning 21/07/2025 17:42:13 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Error 21/07/2025 17:42:11 Microsoft-Windows-DistributedCOM 10010 None The server windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel did not register with DCOM within the required timeout. Error 21/07/2025 17:42:11 Microsoft-Windows-DistributedCOM 10010 None The server {B9B05098-3E30-483F-87F7-027CA78DA287} did not register with DCOM within the required timeout. Information 21/07/2025 17:36:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:36:17 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 21/07/2025 17:34:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/07/2025 17:34:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:34:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000016). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:34:06 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000016). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:34:06 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000016). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:33:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000016). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:33:55 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000042000000B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:33:52 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000042000000B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:33:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 21/07/2025 17:32:48 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy33) is healthy. No action is needed. Information 21/07/2025 17:31:42 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 21/07/2025 17:31:42 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 21/07/2025 17:31:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/07/2025 17:30:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/07/2025 17:30:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/07/2025 17:29:16 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 21/07/2025 17:28:58 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 21/07/2025 17:28:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 21/07/2025 17:28:54 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 21/07/2025 17:28:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎21T16:28:49.778925900Z from ‎2025‎-‎07‎-‎21T16:28:49.778007800Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎21T17:28:49.778925900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/07/2025 17:28:49 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 21/07/2025 17:28:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎21T16:28:49.777733100Z from ‎2025‎-‎07‎-‎21T16:28:45.047341400Z. Time Delta: 4730 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎21T17:28:49.777733100Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 21/07/2025 17:28:49 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 21/07/2025 17:28:29 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 21/07/2025 17:28:16 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Updater Internal Service (GoogleUpdaterInternalService140.0.7272.2) Service File Name: ""C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.2\updater.exe"" --system --windows-service --service=update-internal Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Warning 21/07/2025 17:27:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 21/07/2025 17:27:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 21/07/2025 17:27:50 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 21/07/2025 17:27:48 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎19T17:40:04.019269700Z Wake Time: ‎2025‎-‎07‎-‎21T16:27:47.501396200Z Wake Source: Unknown" Warning 21/07/2025 17:27:48 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 21/07/2025 17:27:48 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 34 to 36. Reason Unknown BootId: 144" Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000014. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000014). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000014). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000014. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000015. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000015). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000015). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000015. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000013). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000013). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000042000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000042000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000042000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000042000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000012. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000012). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000012). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 21/07/2025 17:27:47 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000012. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 21/07/2025 17:27:47 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 33 to 34. Reason SxTransition BootId: 144" Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 21/07/2025 17:27:47 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 21/07/2025 17:27:44 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎21T16:27:44.500000000Z from ‎2025‎-‎07‎-‎19T17:40:06.414160000Z. Time Delta: 168458085 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎21T17:27:44.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/07/2025 18:40:06 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 21/07/2025 17:27:44 EventLog 6013 None The system uptime is 845108 seconds. Information 19/07/2025 18:40:05 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 19/07/2025 18:40:04 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 19/07/2025 18:40:04 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 32 to 33. Reason Unknown BootId: 144" Information 19/07/2025 18:40:04 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 19/07/2025 18:40:02 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 19/07/2025 18:40:00 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5000 milliseconds. Warning 19/07/2025 18:39:55 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5032 milliseconds. Information 19/07/2025 18:38:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\DropboxInc.Dropbox_wkt425jdc3sga\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\33c6a9c110a8c9ee_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\DropboxInc.Dropbox_wkt425jdc3sga\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. Information 19/07/2025 18:38:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_d9ma7nkbkv4rp\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\47b86fda953346a8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenub_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\8eb37732c02a75ce_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenub_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\shellmenua_5r2yrzxs9d21c\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\a74c416bf60c1d4d_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:38:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\shellmenua_5r2yrzxs9d21c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:37:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 19/07/2025 18:35:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 19/07/2025 18:35:05 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp Information 19/07/2025 18:35:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:35:02 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy32) is healthy. No action is needed. Information 19/07/2025 18:35:02 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp Information 19/07/2025 18:34:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 19/07/2025 18:34:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-MICROSOFT.ZUNEVIDEO Information 19/07/2025 18:34:49 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 19/07/2025 18:34:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:34:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2507.46151.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 19/07/2025 18:34:47 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-MICROSOFT.ZUNEVIDEO Information 19/07/2025 18:34:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.25071.10101.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 19/07/2025 18:34:37 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Error 19/07/2025 18:34:31 Microsoft-Windows-WindowsUpdateClient 20 Windows Update Agent Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. Information 19/07/2025 18:34:31 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy31) is healthy. No action is needed. Information 19/07/2025 18:34:31 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop Information 19/07/2025 18:34:24 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/07/2025 18:34:19 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop Information 19/07/2025 18:34:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:34:02 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy30) is healthy. No action is needed. Information 19/07/2025 18:34:01 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop Information 19/07/2025 18:33:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/07/2025 18:33:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2528.4.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 19/07/2025 18:33:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 19/07/2025 18:33:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/07/2025 18:33:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/07/2025 18:33:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 19/07/2025 18:26:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000010). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:26:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 19/07/2025 18:25:04 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 19/07/2025 18:25:04 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 19/07/2025 18:25:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/07/2025 18:24:49 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy29) is healthy. No action is needed. Information 19/07/2025 18:24:42 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 19/07/2025 18:24:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000010). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:17 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000F). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000F). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000015). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:13 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000015). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:13 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000014). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\Settings\settings.dat was cleared updating 28 keys and creating 4 modified pages. Information 19/07/2025 18:24:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\12c06a5b92267ade_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:24:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 3 keys and creating 1 modified pages. Information 19/07/2025 18:24:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:24:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\AppleInc.iTunes_nzyj5cx40ttqa\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\7e83550e03f85e73_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:24:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\UserClasses.dat was cleared updating 4 keys and creating 1 modified pages. Information 19/07/2025 18:24:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\AppleInc.iTunes_nzyj5cx40ttqa\SystemAppData\Helium\User.dat was cleared updating 11 keys and creating 2 modified pages. Information 19/07/2025 18:24:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000014). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:04 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:04 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000011). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:24:01 Microsoft-Windows-Kernel-General 15 (10) Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 7032832 bytes and an ending size of 7016448 bytes. Information 19/07/2025 18:23:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000011). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000010). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:50 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000010). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:50 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000013). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000013). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000012). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000012). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 19/07/2025 18:23:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/07/2025 18:23:36 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000022000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:36 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000022000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:36 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000014). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000014). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000006). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000006). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000005). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 3 modified pages. Warning 19/07/2025 18:23:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/07/2025 18:23:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000011). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:17 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000011). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:23:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 19/07/2025 18:22:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1078 keys and creating 63 modified pages. Information 19/07/2025 18:19:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 19/07/2025 18:19:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\727ab963453f4768_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:18:24 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy28) is healthy. No action is needed. Information 19/07/2025 18:18:17 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎19T17:18:17.943527800Z from ‎2025‎-‎07‎-‎19T17:18:17.943501700Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎19T18:18:17.943527800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/07/2025 18:18:17 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 19/07/2025 18:18:17 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎19T17:18:17.940758300Z from ‎2025‎-‎07‎-‎19T17:18:13.033155900Z. Time Delta: 4907 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎19T18:18:17.940758300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 19/07/2025 18:18:17 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 19/07/2025 18:18:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 10 keys and creating 4 modified pages. Information 19/07/2025 18:18:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\25c2826ab97dbcf0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:18:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 19/07/2025 18:18:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 18 keys and creating 3 modified pages. Information 19/07/2025 18:18:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 57 keys and creating 9 modified pages. Warning 19/07/2025 18:18:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/07/2025 18:17:57 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Information 19/07/2025 18:17:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 19/07/2025 18:17:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Information 19/07/2025 18:17:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\AC\GEH\POF.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:17:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\89bc9879cd777c28_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:17:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 15 keys and creating 4 modified pages. Information 19/07/2025 18:17:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:17:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 19/07/2025 18:17:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. Information 19/07/2025 18:17:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\6b87ed64cdffbeb5_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 19/07/2025 18:17:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 13 keys and creating 2 modified pages. Information 19/07/2025 18:17:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 18 keys and creating 4 modified pages. Information 19/07/2025 18:17:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 37 keys and creating 7 modified pages. Warning 19/07/2025 18:17:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 19/07/2025 18:17:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 19/07/2025 18:17:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 11124 keys and creating 1115 modified pages. Information 19/07/2025 18:17:19 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\Users\rupes\ntuser.dat was reorganized with a starting size of 7741440 bytes and an ending size of 7553024 bytes. Information 19/07/2025 18:17:19 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 19/07/2025 18:17:17 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 19/07/2025 18:17:16 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎17T18:29:34.484219500Z Wake Time: ‎2025‎-‎07‎-‎19T17:17:15.488303400Z Wake Source: Unknown" Warning 19/07/2025 18:17:16 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 19/07/2025 18:17:16 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 30 to 32. Reason Unknown BootId: 144" Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000032000000F). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000032000000F). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000010. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000120000010). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000120000010). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000010. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000F). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000F). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000013). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000013). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000013. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFF00000120000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFF00000120000018). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFF00000120000018). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFF00000120000018. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 99 keys and creating 8 modified pages. Warning 19/07/2025 18:17:15 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 29 to 30. Reason SxTransition BootId: 144" Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 19/07/2025 18:17:15 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 19/07/2025 18:17:12 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎19T17:17:12.500000000Z from ‎2025‎-‎07‎-‎17T18:29:41.055820200Z. Time Delta: 168451444 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎19T18:17:12.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 17/07/2025 19:29:41 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 19/07/2025 18:17:12 EventLog 6013 None The system uptime is 675280 seconds. Information 17/07/2025 19:29:40 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 17/07/2025 19:29:34 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 17/07/2025 19:29:34 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 28 to 29. Reason Unknown BootId: 144" Information 17/07/2025 19:29:34 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 17/07/2025 19:29:34 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 17/07/2025 19:29:31 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Warning 17/07/2025 19:29:31 winsrvext 100 None Process C:\Users\rupes\AppData\Roaming\Spotify\Spotify.exe is delaying system shutdown after 5000 milliseconds. Error 17/07/2025 19:29:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:31 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:30 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:29 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:28 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:27 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Warning 17/07/2025 19:29:26 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5016 milliseconds. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:25 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:24 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:23 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:22 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:21 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:20 Microsoft-Windows-DistributedCOM 10010 None The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required timeout. Error 17/07/2025 19:29:19 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Information 17/07/2025 18:42:15 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy27) is healthy. No action is needed. Information 17/07/2025 18:26:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 17/07/2025 18:14:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 18:14:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 18:11:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/07/2025 18:09:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 17/07/2025 17:58:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/07/2025 17:56:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 17/07/2025 17:49:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 17:41:39 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy26) is healthy. No action is needed. Information 17/07/2025 17:41:29 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:41:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/07/2025 17:39:58 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/07/2025 17:39:58 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 17/07/2025 17:39:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000E). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000E). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000012). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000012). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:25 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000006). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000006). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:21 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000052000000A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000052000000A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:18 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000011). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:12 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000011). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:39:12 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000005). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 17/07/2025 17:39:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 17:38:49 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000005). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:38:49 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:38:44 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:38:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 17/07/2025 17:38:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 17:37:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\f247a62a72392086_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 17/07/2025 17:37:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/07/2025 17:37:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 17:37:22 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 17/07/2025 17:37:20 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎17T10:29:35.599873600Z Wake Time: ‎2025‎-‎07‎-‎17T16:37:19.485893300Z Wake Source: Unknown" Warning 17/07/2025 17:37:20 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 17/07/2025 17:37:20 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000022000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000022000000B). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000022000000B). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000022000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000620000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000620000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000032000000E). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000032000000E). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000032000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000032000000D). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000032000000D). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000032000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000022000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000022000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000022000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:20 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000022000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 26 to 28. Reason Unknown BootId: 144" Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 25 to 26. Reason SxTransition BootId: 144" Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 17/07/2025 17:37:19 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 17/07/2025 17:37:16 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎17T16:37:16.500000000Z from ‎2025‎-‎07‎-‎17T10:29:37.872170000Z. Time Delta: 22058627 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎17T17:37:16.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 17/07/2025 11:29:37 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 17/07/2025 17:37:16 EventLog 6013 None The system uptime is 500084 seconds. Information 17/07/2025 11:29:37 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 17/07/2025 11:29:35 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 17/07/2025 11:29:35 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 24 to 25. Reason Unknown BootId: 144" Information 17/07/2025 11:29:35 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 17/07/2025 11:29:35 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 17/07/2025 11:29:33 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Information 17/07/2025 11:28:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/07/2025 11:27:28 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: PowerShell v7.5.2 (x64) Information 17/07/2025 11:26:35 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 17/07/2025 11:26:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/07/2025 11:26:33 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB Information 17/07/2025 11:26:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2507.46141.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/07/2025 11:26:22 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 11:26:17 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: PowerShell v7.5.2 (x64) Information 17/07/2025 11:25:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 17/07/2025 11:22:57 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 11:22:35 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection Information 17/07/2025 11:22:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 17/07/2025 11:22:33 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection Information 17/07/2025 11:22:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 11:22:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_4.23.7100.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 17/07/2025 11:22:19 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 17/07/2025 11:15:01 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000004). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:15:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 17/07/2025 11:13:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 17/07/2025 11:12:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:42 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:42 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000010). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000010). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:12:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 17/07/2025 11:11:54 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy25) is healthy. No action is needed. Information 17/07/2025 11:10:39 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 17/07/2025 11:10:39 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 17/07/2025 11:10:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/07/2025 11:10:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 11:10:19 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000006). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:10:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 17/07/2025 11:10:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/07/2025 11:09:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/07/2025 11:08:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 11:08:00 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000006). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:08:00 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:07:55 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:07:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 17/07/2025 11:07:34 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎17T10:07:34.336602900Z from ‎2025‎-‎07‎-‎17T10:07:34.336489200Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎17T11:07:34.336602900Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 17/07/2025 11:07:34 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 17/07/2025 11:07:34 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎17T10:07:34.335029700Z from ‎2025‎-‎07‎-‎17T10:07:30.500935100Z. Time Delta: 3834 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎17T11:07:34.335029700Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 17/07/2025 11:07:34 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Warning 17/07/2025 11:07:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 11:07:14 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 17/07/2025 11:06:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 17/07/2025 11:06:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 17/07/2025 11:06:36 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 17/07/2025 11:06:34 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎15T20:11:19.715811700Z Wake Time: ‎2025‎-‎07‎-‎17T10:06:33.484377600Z Wake Source: Unknown" Warning 17/07/2025 11:06:34 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 17/07/2025 11:06:34 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000720000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000720000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000720000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000720000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000E). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000E). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000220000008). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000220000008). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC0000002000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC0000002000000F). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC0000002000000F). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC0000002000000F. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC0000002000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC0000002000000E). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC0000002000000E). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:34 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC0000002000000E. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 22 to 24. Reason Unknown BootId: 144" Warning 17/07/2025 11:06:33 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 21 to 22. Reason SxTransition BootId: 144" Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 17/07/2025 11:06:33 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 17/07/2025 11:06:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎17T10:06:30.500000000Z from ‎2025‎-‎07‎-‎15T20:11:26.717107500Z. Time Delta: 136503782 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎17T11:06:30.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 15/07/2025 21:11:26 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 17/07/2025 11:06:30 EventLog 6013 None The system uptime is 476642 seconds. Information 15/07/2025 21:11:25 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 15/07/2025 21:11:19 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 15/07/2025 21:11:19 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 20 to 21. Reason Unknown BootId: 144" Information 15/07/2025 21:11:19 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 15/07/2025 21:11:19 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 15/07/2025 21:11:18 winsrvext 100 None Process C:\Program Files (x86)\Livedrive\Livedrive.exe is delaying system shutdown after 5063 milliseconds. Warning 15/07/2025 21:11:18 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5046 milliseconds. Information 15/07/2025 20:30:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 15/07/2025 20:28:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 15/07/2025 20:27:09 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp Information 15/07/2025 20:27:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 15/07/2025 20:27:07 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp Information 15/07/2025 20:27:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2507.1001.9.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 15/07/2025 20:26:58 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 15/07/2025 20:26:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 15/07/2025 20:26:54 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 15/07/2025 20:26:53 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 15/07/2025 20:26:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 15/07/2025 20:26:52 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 15/07/2025 20:26:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_22505.1401.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 15/07/2025 20:26:46 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:46 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:41 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch Information 15/07/2025 20:26:39 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 15/07/2025 20:26:39 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 15/07/2025 20:26:39 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint Information 15/07/2025 20:26:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch Information 15/07/2025 20:26:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Information 15/07/2025 20:26:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 15/07/2025 20:26:35 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint Information 15/07/2025 20:26:35 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2504.551.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 15/07/2025 20:26:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2505.21.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 15/07/2025 20:26:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22506.1401.7.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 15/07/2025 20:26:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 15/07/2025 20:26:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 15/07/2025 20:21:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 15/07/2025 20:16:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 15/07/2025 20:14:49 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy24) is healthy. No action is needed. Information 15/07/2025 20:12:48 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 15/07/2025 20:12:48 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 15/07/2025 20:12:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 15/07/2025 20:12:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 15/07/2025 20:11:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎15T19:11:22.719761800Z from ‎2025‎-‎07‎-‎15T19:11:22.719356300Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎15T20:11:22.719761800Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 15/07/2025 20:11:22 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 15/07/2025 20:11:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎15T19:11:22.718470200Z from ‎2025‎-‎07‎-‎15T19:11:20.036686700Z. Time Delta: 2681 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎15T20:11:22.718470200Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 15/07/2025 20:11:22 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Warning 15/07/2025 20:11:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 15/07/2025 20:11:04 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 15/07/2025 20:10:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 15/07/2025 20:10:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 15/07/2025 20:10:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 15/07/2025 20:10:23 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎14T21:51:40.280604100Z Wake Time: ‎2025‎-‎07‎-‎15T19:10:22.484658100Z Wake Source: Unknown" Warning 15/07/2025 20:10:23 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 15/07/2025 20:10:23 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000D). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000D). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000D. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000C). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000C). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000C. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000B). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000B). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000B. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE0000012000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE0000012000000A). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE0000012000000A). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE0000012000000A. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000420000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000420000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:23 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000420000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 18 to 20. Reason Unknown BootId: 144" Warning 15/07/2025 20:10:22 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 17 to 18. Reason SxTransition BootId: 144" Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 15/07/2025 20:10:22 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 15/07/2025 20:10:19 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎15T19:10:19.500000000Z from ‎2025‎-‎07‎-‎14T21:51:42.147560900Z. Time Delta: 76717352 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎15T20:10:19.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/07/2025 22:51:42 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 15/07/2025 20:10:19 EventLog 6013 None The system uptime is 336474 seconds. Information 14/07/2025 22:51:41 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 14/07/2025 22:51:40 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 14/07/2025 22:51:40 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 16 to 17. Reason Unknown BootId: 144" Information 14/07/2025 22:51:40 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 14/07/2025 22:51:40 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 14/07/2025 22:51:38 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 14/07/2025 22:40:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 14/07/2025 22:40:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\e382a49e584ad8f0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 14/07/2025 22:40:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 17 keys and creating 3 modified pages. Information 14/07/2025 22:40:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 9 keys and creating 2 modified pages. Information 14/07/2025 22:38:19 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy23) is healthy. No action is needed. Information 14/07/2025 22:34:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 14/07/2025 22:32:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 14/07/2025 21:45:35 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/07/2025 21:41:11 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/07/2025 21:37:46 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy22) is healthy. No action is needed. Information 14/07/2025 21:36:53 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/07/2025 21:34:56 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/07/2025 21:29:31 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/07/2025 21:29:08 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/07/2025 21:29:08 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/07/2025 21:29:07 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 14/07/2025 21:29:00 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 14/07/2025 21:29:00 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Warning 14/07/2025 21:22:22 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name audienceexposure.com timed out after none of the configured DNS servers responded. Client PID 11288. Information 14/07/2025 20:51:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 14/07/2025 20:49:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 14/07/2025 20:46:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 14/07/2025 20:45:24 Microsoft-Windows-Kernel-General 15 (10) Hive \??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat was reorganized with a starting size of 11419648 bytes and an ending size of 10956800 bytes. Information 14/07/2025 20:45:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\WINDOWS\System32\config\COMPONENTS was cleared updating 147405 keys and creating 12884 modified pages. Information 14/07/2025 20:37:27 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:37:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 14/07/2025 20:36:58 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy21) is healthy. No action is needed. Information 14/07/2025 20:35:36 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 14/07/2025 20:35:36 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 14/07/2025 20:35:32 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 20:35:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000005). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:24 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000005). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:24 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000000D). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000000D). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:15 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:15 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000006). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000006). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000C). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000C). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:35:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000020000014). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000020000014). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:58 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000004). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:58 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000004). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:57 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000003). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 14/07/2025 20:34:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 20:34:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000003). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000005). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:11 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000005). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:11 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000000B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000000B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC0000002000000A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:02 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC0000002000000A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:34:02 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000007). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000007). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000005). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:39 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000005). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:39 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000B). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000B). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000020000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:38 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000020000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:38 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000520000002). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:32 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000520000002). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:32 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000032000000A). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000032000000A). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000009). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:31 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000009). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:31 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000008). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:22 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000008). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:22 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:18 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x132C Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:33:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 14/07/2025 20:33:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 20:32:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 20:32:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\46f83413ee64154_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Warning 14/07/2025 20:32:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 20:32:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 20:31:59 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 14/07/2025 20:31:57 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎14T15:34:26.152878400Z Wake Time: ‎2025‎-‎07‎-‎14T19:31:56.475595200Z Wake Source: Unknown" Warning 14/07/2025 20:31:57 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 14/07/2025 20:31:57 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 14 to 16. Reason Unknown BootId: 144" Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000120000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000120000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000120000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000120000005). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000120000005). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000120000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000008). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000008). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000008. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000007). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000007). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000007. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 13 to 14. Reason SxTransition BootId: 144" Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 14/07/2025 20:31:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 14/07/2025 20:31:53 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎14T19:31:53.500000000Z from ‎2025‎-‎07‎-‎14T15:34:28.312440300Z. Time Delta: 14245187 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎14T20:31:53.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/07/2025 16:34:28 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 14/07/2025 16:34:27 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 14/07/2025 16:34:26 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 14/07/2025 16:34:26 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 12 to 13. Reason Unknown BootId: 144" Information 14/07/2025 16:34:26 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 14/07/2025 16:34:25 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 14/07/2025 16:34:23 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5047 milliseconds. Warning 14/07/2025 16:30:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 16:28:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 16:24:51 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy20) is healthy. No action is needed. Information 14/07/2025 16:17:05 Microsoft-Windows-Kernel-General 15 (10) Hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{3D45F2A0-AB66-4C50-BFD5-B503C2CD819A} was reorganized with a starting size of 11419648 bytes and an ending size of 10956800 bytes. Information 14/07/2025 16:17:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{e5e23221-0000-0000-0000-300300000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{38167FC0-251B-4456-B4BD-52CF9DCBFE77} was cleared updating 147405 keys and creating 12884 modified pages. Information 14/07/2025 16:17:01 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy19\WINDOWS\System32\config\DRIVERS (TM: {ea88a614-5e9f-11f0-9d52-3c52a1296d91}, RM: {ea88a613-5e9f-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 14/07/2025 16:17:01 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy19\WINDOWS\System32\config\SYSTEM (TM: {ea88a611-5e9f-11f0-9d52-3c52a1296d91}, RM: {ea88a610-5e9f-11f0-9d52-3c52a1296d91}) finished with result=0xC00000A2 (Internal code=7). Information 14/07/2025 16:17:00 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy19) is healthy. No action is needed. Information 14/07/2025 16:15:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 14/07/2025 15:24:17 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy18) is healthy. No action is needed. Warning 14/07/2025 15:18:50 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name audienceexposure.com timed out after none of the configured DNS servers responded. Client PID 19696. Information 14/07/2025 14:38:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 14/07/2025 14:36:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 14/07/2025 14:35:03 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 14/07/2025 14:27:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 14:23:36 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy17) is healthy. No action is needed. Information 14/07/2025 14:23:32 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 14/07/2025 14:22:36 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 14/07/2025 14:22:36 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 14/07/2025 14:22:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 14:21:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 14:20:05 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎14T13:20:05.040112300Z from ‎2025‎-‎07‎-‎14T13:20:05.039757000Z. Time Delta: 0 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎14T14:20:05.040112300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/07/2025 14:20:05 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 14/07/2025 14:20:05 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎14T13:20:05.038041300Z from ‎2025‎-‎07‎-‎14T13:20:03.053508800Z. Time Delta: 1984 ms Change Reason: An application or system component changed the time. Process: '\Device\HarddiskVolume2\Windows\System32\svchost.exe' (PID 20192). RTC time: ‎2025‎-‎07‎-‎14T14:20:05.038041300Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 14/07/2025 14:20:05 Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is -60. Information 14/07/2025 14:19:47 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). Warning 14/07/2025 14:19:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 14:19:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 14/07/2025 14:19:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 14/07/2025 14:19:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 14/07/2025 14:19:06 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎13T21:57:23.588526600Z Wake Time: ‎2025‎-‎07‎-‎14T13:19:05.478669200Z Wake Source: Unknown" Warning 14/07/2025 14:19:06 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 14/07/2025 14:19:06 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 10 to 12. Reason Unknown BootId: 144" Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000220000003). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000005). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000005). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000006). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000006). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000006. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000005). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000005). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 14/07/2025 14:19:05 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000005. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Warning 14/07/2025 14:19:05 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 9 to 10. Reason SxTransition BootId: 144" Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 14/07/2025 14:19:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 14/07/2025 14:19:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2025‎-‎07‎-‎14T13:19:02.500000000Z from ‎2025‎-‎07‎-‎13T21:57:26.701365600Z. Time Delta: 55295798 ms Change Reason: System time synchronized with the hardware clock. Process: '' (PID 4). RTC time: ‎2025‎-‎07‎-‎14T14:19:02.500000000Z Current time zone bias: -60 RTC time is in UTC: false System time was based on RTC time: false" Information 13/07/2025 22:57:26 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 14/07/2025 14:19:02 EventLog 6013 None The system uptime is 228999 seconds. Information 13/07/2025 22:57:26 BROWSER 8033 None The browser has forced an election on network \Device\NetBT_Tcpip_{1C9352AB-8578-44B4-8B28-DD7D21C15513} because a master browser was stopped. Information 13/07/2025 22:57:23 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 13/07/2025 22:57:23 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 8 to 9. Reason Unknown BootId: 144" Information 13/07/2025 22:57:23 Microsoft-Windows-Kernel-Power 187 (243) User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. Information 13/07/2025 22:57:23 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Warning 13/07/2025 22:57:21 winsrvext 100 None Process C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe is delaying system shutdown after 5031 milliseconds. Information 13/07/2025 22:55:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 21 keys and creating 8 modified pages. Information 13/07/2025 22:55:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\S-1-5-21-3189258917-1095067000-1847824953-1001\SystemAppData\Helium\Cache\145e6b2d56057ba7_COM15.dat was cleared updating 1 keys and creating 1 modified pages. Information 13/07/2025 22:55:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 27 keys and creating 6 modified pages. Information 13/07/2025 22:55:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\rupes\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 0 modified pages. Information 13/07/2025 22:39:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 13/07/2025 22:37:23 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Warning 13/07/2025 22:32:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/07/2025 22:24:25 Microsoft-Windows-Ntfs 98 None Volume Windows 10 Professional (\Device\HarddiskVolumeShadowCopy16) is healthy. No action is needed. Information 13/07/2025 22:24:25 Volsnap 95 None The oldest shadow copy of volume C: was deleted to allow shadow copies created afterward and marked for delete to be deleted. Information 13/07/2025 22:22:20 Microsoft-Windows-FilterManager 6 None File System Filter 'dbx' (6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) has successfully loaded and registered with Filter Manager. Information 13/07/2025 22:22:20 Microsoft-Windows-FilterManager 1 None File System Filter 'dbx' (Version 6.1, ‎2019‎-‎02‎-‎11T17:39:19.000000000Z) unloaded successfully. Warning 13/07/2025 22:22:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/07/2025 22:21:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/07/2025 22:21:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user PATRE-DESKTOP\Rupesh Patre SID (S-1-5-21-3189258917-1095067000-1847824953-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/07/2025 22:20:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 13/07/2025 22:20:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 13/07/2025 22:20:19 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 13/07/2025 22:20:17 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2025‎-‎07‎-‎13T17:43:02.161534200Z Wake Time: ‎2025‎-‎07‎-‎13T21:20:16.485865900Z Wake Source: Unknown" Warning 13/07/2025 22:20:17 BTHUSB 48 None The local adapter does not support reading the encryption key size for a connected device. Insecure devices may be able to connect to this system. Information 13/07/2025 22:20:17 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 13/07/2025 22:20:16 Microsoft-Windows-Kernel-Power 566 (268) "The system session has transitioned from 6 to 8. Reason Unknown BootId: 144" Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000220000002). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000220000002. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFC00000020000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFC00000020000004). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFC00000020000004). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFC00000020000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 114 HTTP Configuration Property Trace Task Removed URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) from URL group (0xFE00000320000004). Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 113 HTTP Configuration Property Trace Task Attempted to add URL (http://*:5357/1320054c-3a4f-4a3e-882a-6349d70c8b0d/) to URL group (0xFE00000320000004). Status: 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 111 HTTP Configuration Property Trace Task Create URL group 0xFE00000320000004. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE Information 13/07/2025 22:20:16 Microsoft-Windows-HttpService 117 HTTP Configuration Property Trace Task Delete URL group 0xFE00000320000003. Status 0x0. Process Id 0x7D8 Executable path \Device\HarddiskVolume2\Windows\System32\svchost.exe, User LOCAL SERVICE