Level Date and Time Source Event ID Task Category Information 11/8/2021 10:22:49 PM Microsoft-Windows-Eventlog 104 Log clear The Application log file was cleared. Warning 11/8/2021 10:21:55 PM Netwtw08 6062 None 6062 - Lso was triggered Information 11/8/2021 10:21:25 PM Microsoft-Windows-TPM-WMI 1025 None The TPM was successfully provisioned and is now ready for use. Information 11/8/2021 10:21:25 PM Microsoft-Windows-TPM-WMI 1282 None The TBS device identifier has been generated. Information 11/8/2021 10:21:25 PM TPM 18 None This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. Information 11/8/2021 10:21:25 PM Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam" Information 11/8/2021 10:21:22 PM Netwtw08 7021 None 7021 - Connection telemetry fields and analysis usage Warning 11/8/2021 10:21:21 PM e1rexpress 27 None "Intel(R) I211 Gigabit Network Connection Network link is disconnected. " Information 11/8/2021 10:21:19 PM Microsoft-Windows-FilterManager 6 None File System Filter 'gameflt' (10.0, ‎2053‎-‎05‎-‎19T07:54:15.000000000Z) has successfully loaded and registered with Filter Manager. Warning 11/8/2021 10:21:19 PM Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 11/8/2021 10:21:19 PM Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 11/8/2021 10:21:18 PM Microsoft-Windows-WLAN-AutoConfig 10001 None "WLAN Extensibility Module has successfully started. Module Path: C:\Windows\system32\IntelWifiIhv08.dll " Information 11/8/2021 10:21:18 PM Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 11/8/2021 10:21:18 PM Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'bindflt' (10.0, ‎2070‎-‎08‎-‎23T03:34:13.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2007‎-‎04‎-‎09T12:08:30.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2033‎-‎11‎-‎18T20:49:10.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 1 None File System Filter 'CldFlt' (Version 10.0, ‎2033‎-‎11‎-‎18T20:49:10.000000000Z) unloaded successfully. Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2033‎-‎11‎-‎18T20:49:10.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎2041‎-‎09‎-‎18T23:13:33.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 11/8/2021 10:21:18 PM Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 11/8/2021 10:21:18 PM Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 11/8/2021 10:21:18 PM Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2080‎-‎03‎-‎16T06:57:52.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:18 PM Microsoft-Windows-Directory-Services-SAM 16983 None "The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods. For more information please see https://go.microsoft.com/fwlink/?linkid=2150956. " Information 11/8/2021 10:21:18 PM Microsoft-Windows-Directory-Services-SAM 16977 None "The domain is configured with the following minimum password length-related settings. MinimumPasswordLength: 0 RelaxMinimumPasswordLengthLimits: 0 MinimumPasswordLengthAudit: -1 For more information see https://go.microsoft.com/fwlink/?LinkId=2097191. " Information 11/8/2021 10:21:18 PM Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 11/8/2021 10:21:18 PM Microsoft-Windows-Wininit 14 None Credential Guard configuration: 0x0, 0 Information 11/8/2021 10:21:17 PM Microsoft-Windows-Kernel-General 24 (11) The time zone information was refreshed with exit reason 0. Current time zone bias is 360. Information 11/8/2021 10:21:17 PM Microsoft-Windows-Subsys-SMSS 17 None A platform binary was successfully executed. Information 11/8/2021 10:21:16 PM Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{fa15ea29-14cf-494a-b5ec-bcbff7fb9297} (\Device\HarddiskVolume4) is healthy. No action is needed. Information 11/8/2021 10:21:16 PM Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{4ed6c731-225c-4810-b107-628e535c15cd} (\Device\HarddiskVolume5) is healthy. No action is needed. Information 11/8/2021 10:21:16 PM Microsoft-Windows-Ntfs 98 None Volume E: (\Device\HarddiskVolume8) is healthy. No action is needed. Information 11/8/2021 10:21:16 PM BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 11/8/2021 10:21:15 PM Netwtw08 7017 None 7017 - secure boot (SB) configuration Information 11/8/2021 10:21:15 PM Netwtw08 7010 None 7010 - driver enabled (miniport init) Information 11/8/2021 10:21:15 PM Netwtw08 7005 None 7005 - SAR value max TX power (WRDS) Information 11/8/2021 10:21:15 PM Netwtw08 7036 None The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6 AX200 160MHz state. Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 15 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 146 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 14 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 146 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 13 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 127 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 12 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 127 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 11 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 143 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 10 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 143 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 9 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 131 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 8 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 131 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 7 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 135 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 6 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 135 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 139 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 139 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 150 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 150 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:15 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3801 Maximum performance percentage: 150 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:14 PM Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (2 state(s)) Performance state type: ACPI Collaborative Processor Performance Control Nominal Frequency (MHz): 3800 Maximum performance percentage: 150 Minimum performance percentage: 46 Minimum throttle percentage: 14" Information 11/8/2021 10:21:14 PM Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 11/8/2021 10:21:14 PM Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2025‎-‎01‎-‎05T20:41:12.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:14 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2002‎-‎03‎-‎01T05:12:42.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:14 PM Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 11/8/2021 10:21:14 PM Microsoft-Windows-FilterManager 6 None File System Filter 'WdFilter' (10.0, ‎2043‎-‎02‎-‎28T07:55:46.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:14 PM Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2024‎-‎08‎-‎23T08:35:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:14 PM Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎2062‎-‎12‎-‎22T23:21:06.000000000Z) has successfully loaded and registered with Filter Manager. Information 11/8/2021 10:21:12 PM Microsoft-Windows-HAL 16 None The iommu fault reporting has been initialized. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-General 20 (6) "The leap second configuration has been updated. Reason: Leap second data initialized from registry during boot Leap seconds enabled: true New leap second count: 0 Old leap second count: 0" Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x0. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 238 (101) EFI time zone bias: 2047. Daylight flags: 0 Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 11/8/2021 10:21:12 PM Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2021‎-‎11‎-‎09T04:21:12.500000000Z. Information 11/8/2021 10:20:59 PM Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2021‎-‎11‎-‎09T04:20:59.627046100Z. Information 11/8/2021 10:20:59 PM Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 11/8/2021 10:20:54 PM Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Warning 11/8/2021 10:20:54 PM Microsoft-Windows-WLAN-AutoConfig 10002 None "WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\IntelWifiIhv08.dll " Information 11/8/2021 10:21:18 PM EventLog 6013 None The system uptime is 6 seconds. Information 11/8/2021 10:21:18 PM EventLog 6005 None The Event log service was started. Information 11/8/2021 10:21:18 PM EventLog 6009 None Microsoft (R) Windows (R) 10.00. 19043 Multiprocessor Free. Information 11/8/2021 10:20:54 PM Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 11/8/2021 10:20:54 PM Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 11/8/2021 10:20:54 PM Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 11/8/2021 10:20:54 PM Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 11/8/2021 10:20:54 PM Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 11/8/2021 10:20:54 PM Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 11/8/2021 10:20:54 PM Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 11/8/2021 10:20:54 PM EventLog 6006 None The Event log service was stopped. Information 11/8/2021 10:20:48 PM Application Popup 26 None "Application popup: CiceroUIWndFrame: PowerLauncher.exe - Application Error : The instruction at 0x00007FF9B00F3FAE referenced memory at 0x0000000000000000. The memory could not be read. Click on OK to terminate the program" Information 11/8/2021 10:20:48 PM User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-9OHK22C) has initiated the restart of computer DESKTOP-9OHK22C on behalf of user DESKTOP-9OHK22C\frozenCode for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 11/8/2021 10:20:45 PM Microsoft-Windows-Eventlog 104 Log clear The Application log file was cleared. Information 11/8/2021 10:20:32 PM Microsoft-Windows-Eventlog 104 Log clear The System log file was cleared.