﻿<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-04-16 20:31:27.3309289" />
    <EventRecordID>1755</EventRecordID>
    <Correlation />
    <Execution ProcessID="4568" ThreadID="4704" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:21.0559812" />
    <EventRecordID>1804</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="440" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>134</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:34.2307229" />
    <EventRecordID>1849</EventRecordID>
    <Correlation />
    <Execution ProcessID="2844" ThreadID="2936" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
    <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
    <Data Name="RetryMinutes">15</Data>
    <Data Name="DomainPeer">time.windows.com,0x9</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>134</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:35.7331131" />
    <EventRecordID>1861</EventRecordID>
    <Correlation />
    <Execution ProcessID="2844" ThreadID="2936" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
    <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
    <Data Name="RetryMinutes">15</Data>
    <Data Name="DomainPeer">time.windows.com,0x9</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:42.8183008" />
    <EventRecordID>1897</EventRecordID>
    <Correlation />
    <Execution ProcessID="1832" ThreadID="2292" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:42.8283715" />
    <EventRecordID>1898</EventRecordID>
    <Correlation />
    <Execution ProcessID="1832" ThreadID="1864" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:32:42.8632997" />
    <EventRecordID>1899</EventRecordID>
    <Correlation />
    <Execution ProcessID="1532" ThreadID="2996" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">LenovoSmartService</Data>
    <Data Name="param2">1</Data>
    <Data Name="param3">300000</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5">Restart the service</Data>
    <Binary>4C-00-65-00-6E-00-6F-00-76-00-6F-00-53-00-6D-00-61-00-72-00-74-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>52</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:36:58.4062681" />
    <EventRecordID>1940</EventRecordID>
    <Correlation />
    <Execution ProcessID="2844" ThreadID="2948" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_TIME_JUMP_AUDIT">
    <Data Name="TimeOffsetSeconds">53921</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:37:29.8028454" />
    <EventRecordID>1966</EventRecordID>
    <Correlation />
    <Execution ProcessID="5492" ThreadID="5700" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:37:51.0684511" />
    <EventRecordID>2011</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="404" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:38:01.9799177" />
    <EventRecordID>2094</EventRecordID>
    <Correlation />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:38:01.9871619" />
    <EventRecordID>2095</EventRecordID>
    <Correlation />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:38:02.4892600" />
    <EventRecordID>2101</EventRecordID>
    <Correlation />
    <Execution ProcessID="1580" ThreadID="2100" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">LenovoSmartService</Data>
    <Data Name="param2">1</Data>
    <Data Name="param3">300000</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5">Restart the service</Data>
    <Binary>4C-00-65-00-6E-00-6F-00-76-00-6F-00-53-00-6D-00-61-00-72-00-74-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:39:39.1047339" />
    <EventRecordID>2148</EventRecordID>
    <Correlation />
    <Execution ProcessID="6152" ThreadID="14156" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80240016</Data>
    <Data Name="updateTitle">Lenovo SoftwareComponent Driver Update (26.4.0.12)</Data>
    <Data Name="updateGuid">b5961e83-ebad-4d52-92e6-6ad5ac2b0be7</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">8b24b027-1dee-babb-9a95-3517dfb9c552</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:39:42.1198986" />
    <EventRecordID>2149</EventRecordID>
    <Correlation />
    <Execution ProcessID="6152" ThreadID="12520" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80240016</Data>
    <Data Name="updateTitle">Microsoft Corporation AudioProcessingObject Driver Update (1.0.4.7057)</Data>
    <Data Name="updateGuid">740c4b6c-bcfa-4f97-ae49-7bcc6933e696</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">8b24b027-1dee-babb-9a95-3517dfb9c552</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>225</EventID>
    <Version>2</Version>
    <Level>3</Level>
    <Task>223</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:39:44.8451235" />
    <EventRecordID>2150</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="11508" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ProcessId">8760</Data>
    <Data Name="ProcessNameLength">130</Data>
    <Data Name="ProcessName">\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2c508a58e5bc7f2d\RtkAudUService64.exe</Data>
    <Data Name="DeviceInstanceLength">44</Data>
    <Data Name="DeviceInstance">USB\VID_048D&amp;amp;PID_C195&amp;amp;MI_00\8&amp;amp;6993f3c&amp;amp;0&amp;amp;0000</Data>
    <Data Name="CommandLineLength">118</Data>
    <Data Name="CommandLine">"C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2c508a58e5bc7f2d\RtkAudUService64.exe" -admin</Data>
    <Data Name="VetoingDevicesLength">53</Data>
    <Data Name="VetoingDevices">HID\VID_048D&amp;amp;PID_C195&amp;amp;MI_00&amp;amp;Col02\9&amp;amp;17950691&amp;amp;0&amp;amp;0001, </Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:40:30.8530521" />
    <EventRecordID>2169</EventRecordID>
    <Correlation ActivityID="a07fa4c1-20d8-000a-a6f1-7fa0d820dd01" />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1000" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param5">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param6">LAPTOP-RVT62EKO</Data>
    <Data Name="param7">defaultuser0</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1000</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy</Data>
    <Data Name="param11">S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:40:30.8540558" />
    <EventRecordID>2170</EventRecordID>
    <Correlation ActivityID="a07fa4c1-20d8-000f-a52c-80a0d820dd01" />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1000" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param5">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param6">LAPTOP-RVT62EKO</Data>
    <Data Name="param7">defaultuser0</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1000</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy</Data>
    <Data Name="param11">S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:40:33.7717060" />
    <EventRecordID>2171</EventRecordID>
    <Correlation ActivityID="a07fa4c1-20d8-0002-47f9-7fa0d820dd01" />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1000" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param5">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param6">LAPTOP-RVT62EKO</Data>
    <Data Name="param7">defaultuser0</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1000</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy</Data>
    <Data Name="param11">S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:40:33.7727048" />
    <EventRecordID>2172</EventRecordID>
    <Correlation ActivityID="a07fa4c1-20d8-0002-4af9-7fa0d820dd01" />
    <Execution ProcessID="1880" ThreadID="2764" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1000" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param5">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param6">LAPTOP-RVT62EKO</Data>
    <Data Name="param7">defaultuser0</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1000</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy</Data>
    <Data Name="param11">S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:41:38.4921409" />
    <EventRecordID>2175</EventRecordID>
    <Correlation />
    <Execution ProcessID="6152" ThreadID="5856" />
    <Channel>System</Channel>
    <Computer>LAPTOP-RVT62EKO</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80240016</Data>
    <Data Name="updateTitle">Microsoft Corporation AudioProcessingObject Driver Update (1.0.4.7057)</Data>
    <Data Name="updateGuid">740c4b6c-bcfa-4f97-ae49-7bcc6933e696</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">8b24b027-1dee-babb-9a95-3517dfb9c552</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:54:46.7883589" />
    <EventRecordID>2239</EventRecordID>
    <Correlation />
    <Execution ProcessID="4392" ThreadID="4732" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:55:10.1382360" />
    <EventRecordID>2274</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="304" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-TPM-WMI" Guid="7d5387b0-cbe0-11da-a94d-0800200c9a66" />
    <EventID>1040</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:55:31.7968925" />
    <EventRecordID>2343</EventRecordID>
    <Correlation />
    <Execution ProcessID="3760" ThreadID="3148" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Path">C:\Windows\Logs\MeasuredBoot\0000000010-0000000000.json</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148" />
    <EventID>30</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>100</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000020000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:55:59.5297324" />
    <EventRecordID>2387</EventRecordID>
    <Correlation />
    <Execution ProcessID="4880" ThreadID="4920" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <UserData>
    <InitChannelPublisherEnableFailure>
      <ErrorCode>5</ErrorCode>
      <ChannelPath>Microsoft-Windows-Kernel-ShimEngine/Operational</ChannelPath>
      <PublisherGuid>0bf2fb94-7b60-4b4d-9766-e82f658df540</PublisherGuid>
    </InitChannelPublisherEnableFailure>
  </UserData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:56:11.8672360" />
    <EventRecordID>2418</EventRecordID>
    <Correlation />
    <Execution ProcessID="5576" ThreadID="6512" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:56:33.7863738" />
    <EventRecordID>2454</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="440" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:56:56.5953820" />
    <EventRecordID>2550</EventRecordID>
    <Correlation />
    <Execution ProcessID="4344" ThreadID="7376" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:57:19.8956143" />
    <EventRecordID>2586</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="456" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:57:32.1595840" />
    <EventRecordID>2666</EventRecordID>
    <Correlation />
    <Execution ProcessID="1888" ThreadID="2844" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:57:32.1595840" />
    <EventRecordID>2667</EventRecordID>
    <Correlation />
    <Execution ProcessID="1888" ThreadID="2844" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:57:32.3398996" />
    <EventRecordID>2668</EventRecordID>
    <Correlation />
    <Execution ProcessID="1592" ThreadID="7212" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">LenovoSmartService</Data>
    <Data Name="param2">1</Data>
    <Data Name="param3">300000</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5">Restart the service</Data>
    <Binary>4C-00-65-00-6E-00-6F-00-76-00-6F-00-53-00-6D-00-61-00-72-00-74-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 10:59:29.4858644" />
    <EventRecordID>2681</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0003-e9d7-2a59db20dd01" />
    <Execution ProcessID="1888" ThreadID="1920" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:06:00.9987654" />
    <EventRecordID>2792</EventRecordID>
    <Correlation />
    <Execution ProcessID="1888" ThreadID="11436" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:06:01.0038583" />
    <EventRecordID>2793</EventRecordID>
    <Correlation />
    <Execution ProcessID="1888" ThreadID="11436" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:06:01.9012502" />
    <EventRecordID>2794</EventRecordID>
    <Correlation />
    <Execution ProcessID="1592" ThreadID="5216" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">LenovoSmartService</Data>
    <Data Name="param2">2</Data>
    <Data Name="param3">300000</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5">Restart the service</Data>
    <Binary>4C-00-65-00-6E-00-6F-00-76-00-6F-00-53-00-6D-00-61-00-72-00-74-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:18:45.4977460" />
    <EventRecordID>2913</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-000f-4725-4259db20dd01" />
    <Execution ProcessID="1888" ThreadID="7300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:21:47.2953221" />
    <EventRecordID>2924</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-000c-8087-3559db20dd01" />
    <Execution ProcessID="1888" ThreadID="15456" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:25:01.2889721" />
    <EventRecordID>2951</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0004-213e-8659db20dd01" />
    <Execution ProcessID="6852" ThreadID="20484" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9MSSGKG348SP-MicrosoftWindows.Client.WebExperience</Data>
    <Data Name="updateGuid">ab992138-3070-4013-a516-d11f9cad2318</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:25:42.2234791" />
    <EventRecordID>2966</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0005-f5a7-7d59db20dd01" />
    <Execution ProcessID="6852" ThreadID="9452" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9WZDNCRFJBH4-Microsoft.Windows.Photos</Data>
    <Data Name="updateGuid">8109cff8-bb1f-4bae-b1b9-fe7737bc87ea</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:36:18.9177591" />
    <EventRecordID>3008</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-000d-df43-3d59db20dd01" />
    <Execution ProcessID="6852" ThreadID="26288" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9WZDNCRFJBH4-Microsoft.Windows.Photos</Data>
    <Data Name="updateGuid">8109cff8-bb1f-4bae-b1b9-fe7737bc87ea</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:41:39.3833934" />
    <EventRecordID>3011</EventRecordID>
    <Correlation />
    <Execution ProcessID="13404" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-07-31 14:41:39.3839624" />
    <EventRecordID>3012</EventRecordID>
    <Correlation />
    <Execution ProcessID="13404" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 16:15:08.7116140" />
    <EventRecordID>3039</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0005-5e56-ea59db20dd01" />
    <Execution ProcessID="16004" ThreadID="24100" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9NBLGGH4NNS1-Microsoft.DesktopAppInstaller</Data>
    <Data Name="updateGuid">6f9629d2-6fb8-4251-bc1c-74eab270771e</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-07-31 16:15:40.7261663" />
    <EventRecordID>3048</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0005-a01b-eb59db20dd01" />
    <Execution ProcessID="16004" ThreadID="28832" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9NBLGGH4NNS1-Microsoft.DesktopAppInstaller</Data>
    <Data Name="updateGuid">6f9629d2-6fb8-4251-bc1c-74eab270771e</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>225</EventID>
    <Version>2</Version>
    <Level>3</Level>
    <Task>223</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 01:31:19.1151524" />
    <EventRecordID>3127</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="13100" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ProcessId">26640</Data>
    <Data Name="ProcessNameLength">52</Data>
    <Data Name="ProcessName">\Device\HarddiskVolume3\Windows\System32\audiodg.exe</Data>
    <Data Name="DeviceInstanceLength">76</Data>
    <Data Name="DeviceInstance">HDAUDIO\FUNC_01&amp;amp;VEN_10EC&amp;amp;DEV_0287&amp;amp;SUBSYS_17AA3926&amp;amp;REV_1000\5&amp;amp;1ea766b5&amp;amp;0&amp;amp;0001</Data>
    <Data Name="CommandLineLength">69</Data>
    <Data Name="CommandLine">C:\Windows\system32\AUDIODG.EXE 0x00000000000006B4, 0x00000000000006B0</Data>
    <Data Name="VetoingDevicesLength">78</Data>
    <Data Name="VetoingDevices">HDAUDIO\FUNC_01&amp;amp;VEN_10EC&amp;amp;DEV_0287&amp;amp;SUBSYS_17AA3926&amp;amp;REV_1000\5&amp;amp;1ea766b5&amp;amp;0&amp;amp;0001, </Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7009</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:09:48.4362718" />
    <EventRecordID>3148</EventRecordID>
    <Correlation />
    <Execution ProcessID="1592" ThreadID="16200" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">30000</Data>
    <Data Name="param2">GameDVR and Broadcast User Service_a2b558</Data>
    <Binary>42-00-63-00-61-00-73-00-74-00-44-00-56-00-52-00-55-00-73-00-65-00-72-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-5F-00-61-00-32-00-62-00-35-00-35-00-38-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:09:48.4362718" />
    <EventRecordID>3149</EventRecordID>
    <Correlation />
    <Execution ProcessID="1592" ThreadID="16200" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">GameDVR and Broadcast User Service_a2b558</Data>
    <Data Name="param2">%%1053</Data>
    <Binary>42-00-63-00-61-00-73-00-74-00-44-00-56-00-52-00-55-00-73-00-65-00-72-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-5F-00-61-00-32-00-62-00-35-00-35-00-38-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:09:48.4362718" />
    <EventRecordID>3150</EventRecordID>
    <Correlation />
    <Execution ProcessID="1752" ThreadID="23244" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">1053</Data>
    <Data Name="param2">BcastDVRUserService_a2b558</Data>
    <Data Name="param3">Unavailable</Data>
    <Data Name="param4">Windows.Media.Capture.Internal.AppCaptureShell</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="winsrvext" Guid="2b9537f0-4a90-557b-1313-d0ce2827a94a" />
    <EventID>100</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:09:52.0548050" />
    <EventRecordID>3151</EventRecordID>
    <Correlation />
    <Execution ProcessID="9388" ThreadID="10836" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ProcessImageFileNameWin32">C:\Windows\System32\rdrleakdiag.exe</Data>
    <Data Name="ShutdownDuration">500</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7043</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:10:24.9822870" />
    <EventRecordID>3156</EventRecordID>
    <Correlation ActivityID="592aaf55-20db-0002-f142-785bdb20dd01" />
    <Execution ProcessID="1592" ThreadID="16200" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Mixed Reality Link</Data>
    <Binary>4D-00-69-00-78-00-65-00-64-00-52-00-65-00-61-00-6C-00-69-00-74-00-79-00-4C-00-69-00-6E-00-6B-00-53-00-76-00-63-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:10:25.8136857" />
    <EventRecordID>3167</EventRecordID>
    <Correlation />
    <Execution ProcessID="4416" ThreadID="13052" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:10:48.0025853" />
    <EventRecordID>3205</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:10:59.7390715" />
    <EventRecordID>3276</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="5796" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:10:59.7508433" />
    <EventRecordID>3277</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="2300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:20.5995896" />
    <EventRecordID>3298</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="15900" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:20.6013376" />
    <EventRecordID>3299</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="5952" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:27.8170377" />
    <EventRecordID>3303</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="5796" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:27.9265749" />
    <EventRecordID>3304</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="1976" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:28.8239381" />
    <EventRecordID>3306</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="1964" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:11:29.7608849" />
    <EventRecordID>3307</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="1976" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1001" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">siva2</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1001</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:12:43.9020920" />
    <EventRecordID>3316</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="7084" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:12:43.9020920" />
    <EventRecordID>3317</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="6472" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:12:58.6358347" />
    <EventRecordID>3318</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-0003-b179-26576321dd01" />
    <Execution ProcessID="1952" ThreadID="2300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:14:07.6421344" />
    <EventRecordID>3323</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="6392" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:14:07.6481516" />
    <EventRecordID>3324</EventRecordID>
    <Correlation />
    <Execution ProcessID="1952" ThreadID="2300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:16:08.0381260" />
    <EventRecordID>3366</EventRecordID>
    <Correlation />
    <Execution ProcessID="1664" ThreadID="12436" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DAService</Data>
    <Data Name="param2">1</Data>
    <Data Name="param3">500</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5">Restart the service</Data>
    <Binary>44-00-41-00-53-00-65-00-72-00-76-00-69-00-63-00-65-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:17:41.7691572" />
    <EventRecordID>3376</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-000a-9db0-29576321dd01" />
    <Execution ProcessID="1816" ThreadID="16648" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">"C:\Users\giris\AppData\Local\Microsoft\OneDrive\25.087.0506.0001\FileCoAuth.exe" -Embedding</Data>
    <Data Name="param2">2147958009</Data>
    <Data Name="param3">{544C4C52-DE0B-4D14-9510-21745381D5CA}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:17:54.4005567" />
    <EventRecordID>3377</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-000a-c0d9-29576321dd01" />
    <Execution ProcessID="1816" ThreadID="10392" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">"C:\Users\giris\AppData\Local\Microsoft\OneDrive\25.087.0506.0001\FileCoAuth.exe" -Embedding</Data>
    <Data Name="param2">2147958009</Data>
    <Data Name="param3">{544C4C52-DE0B-4D14-9510-21745381D5CA}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:17:55.1388212" />
    <EventRecordID>3378</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-0002-eed2-29576321dd01" />
    <Execution ProcessID="1816" ThreadID="20824" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">"C:\Users\giris\AppData\Local\Microsoft\OneDrive\25.087.0506.0001\FileCoAuth.exe" -Embedding</Data>
    <Data Name="param2">2147958009</Data>
    <Data Name="param3">{94269C4E-071A-4116-90E6-52E557067E4E}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:17:55.1674421" />
    <EventRecordID>3379</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-0000-07bf-25576321dd01" />
    <Execution ProcessID="1816" ThreadID="20824" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">"C:\Users\giris\AppData\Local\Microsoft\OneDrive\25.087.0506.0001\FileCoAuth.exe" -Embedding</Data>
    <Data Name="param2">2147958009</Data>
    <Data Name="param3">{94269C4E-071A-4116-90E6-52E557067E4E}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:24:30.5745918" />
    <EventRecordID>3380</EventRecordID>
    <Correlation ActivityID="5722b79c-2163-0003-f9a7-2e576321dd01" />
    <Execution ProcessID="1952" ThreadID="17520" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7043</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:29:45.6689969" />
    <EventRecordID>3390</EventRecordID>
    <Correlation ActivityID="57230639-2163-000b-6b6c-38576321dd01" />
    <Execution ProcessID="1664" ThreadID="25608" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Mixed Reality Link</Data>
    <Binary>4D-00-69-00-78-00-65-00-64-00-52-00-65-00-61-00-6C-00-69-00-74-00-79-00-4C-00-69-00-6E-00-6B-00-53-00-76-00-63-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:29:47.3665074" />
    <EventRecordID>3401</EventRecordID>
    <Correlation />
    <Execution ProcessID="4600" ThreadID="15684" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:10.0356325" />
    <EventRecordID>3439</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="416" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:20.7689015" />
    <EventRecordID>3506</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="2000" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:20.7709271" />
    <EventRecordID>3507</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="8140" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:35.3240469" />
    <EventRecordID>3527</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="8212" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:35.3935636" />
    <EventRecordID>3528</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="1980" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:36.4903752" />
    <EventRecordID>3530</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="6784" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:30:37.2740250" />
    <EventRecordID>3531</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="2460" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:31:00.2266713" />
    <EventRecordID>3536</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000a-6d22-aa0b6621dd01" />
    <Execution ProcessID="1964" ThreadID="2900" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:32:05.7270489" />
    <EventRecordID>3540</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5548" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:32:05.7270489" />
    <EventRecordID>3541</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="8108" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:32:21.0526792" />
    <EventRecordID>3542</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0002-66fc-aa0b6621dd01" />
    <Execution ProcessID="1964" ThreadID="6120" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 03:57:10.7853509" />
    <EventRecordID>3575</EventRecordID>
    <Correlation />
    <Execution ProcessID="12000" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 04:03:02.5157383" />
    <EventRecordID>3576</EventRecordID>
    <Correlation />
    <Execution ProcessID="12000" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 04:07:23.7480135" />
    <EventRecordID>3578</EventRecordID>
    <Correlation />
    <Execution ProcessID="12000" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 07:07:31.9456966" />
    <EventRecordID>3615</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000a-9244-db0b6621dd01" />
    <Execution ProcessID="1964" ThreadID="10612" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">E046963F.LenovoCompanion_10.2506.10.0_x64__k1h2ywk1493x8</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 09:50:08.8264967" />
    <EventRecordID>3617</EventRecordID>
    <Correlation />
    <Execution ProcessID="16632" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 09:51:14.2235749" />
    <EventRecordID>3618</EventRecordID>
    <Correlation />
    <Execution ProcessID="16632" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 10:58:25.6843504" />
    <EventRecordID>3621</EventRecordID>
    <Correlation />
    <Execution ProcessID="7080" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 12:27:21.3869482" />
    <EventRecordID>3639</EventRecordID>
    <Correlation />
    <Execution ProcessID="7080" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>134</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 17:38:39.9573910" />
    <EventRecordID>3652</EventRecordID>
    <Correlation />
    <Execution ProcessID="9312" ThreadID="22516" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
    <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
    <Data Name="RetryMinutes">15</Data>
    <Data Name="DomainPeer">time.windows.com,0x9</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>134</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-01 17:38:40.1763063" />
    <EventRecordID>3654</EventRecordID>
    <Correlation />
    <Execution ProcessID="9312" ThreadID="22516" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
    <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
    <Data Name="RetryMinutes">15</Data>
    <Data Name="DomainPeer">time.windows.com,0x9</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb" />
    <EventID>134</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 02:49:40.0246457" />
    <EventRecordID>3670</EventRecordID>
    <Correlation />
    <Execution ProcessID="9312" ThreadID="22516" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
    <Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
    <Data Name="RetryMinutes">15</Data>
    <Data Name="DomainPeer">time.windows.com,0x9</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 09:38:14.8735950" />
    <EventRecordID>3731</EventRecordID>
    <Correlation />
    <Execution ProcessID="18040" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 10:38:54.3365428" />
    <EventRecordID>3733</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000f-31b2-ff0c6621dd01" />
    <Execution ProcessID="1964" ThreadID="30388" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:54:42.2839178" />
    <EventRecordID>3832</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0006-8991-7f0c6621dd01" />
    <Execution ProcessID="27208" ThreadID="28484" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9P5Z076K079H-MicrosoftCorporationII.WinAppRuntime.Singleton</Data>
    <Data Name="updateGuid">8a476b67-4de3-4ae0-9a34-3f6f61ae6e35</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:54:55.2234706" />
    <EventRecordID>3849</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0004-545d-100d6621dd01" />
    <Execution ProcessID="27208" ThreadID="25936" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9NBLGGH4LS1F-Microsoft.StorePurchaseApp</Data>
    <Data Name="updateGuid">69125d0e-54d6-4e49-b9ce-28e141212679</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:55:21.6909652" />
    <EventRecordID>3858</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0004-1ee8-100d6621dd01" />
    <Execution ProcessID="27208" ThreadID="23444" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9N36PPMP8S23-A-Volute.Nahimic</Data>
    <Data Name="updateGuid">0146b041-a0cd-4b1f-a469-2426ef23c794</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:56:07.7401685" />
    <EventRecordID>3893</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0004-c63c-120d6621dd01" />
    <Execution ProcessID="27208" ThreadID="23308" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9NMPJ99VJBWV-Microsoft.YourPhone</Data>
    <Data Name="updateGuid">3ccb35fd-8903-4681-ba54-30952d1ee219</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:59:49.3752235" />
    <EventRecordID>3918</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000c-ac14-180c6621dd01" />
    <Execution ProcessID="1964" ThreadID="19104" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:59:49.4827078" />
    <EventRecordID>3919</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000c-3e1c-180c6621dd01" />
    <Execution ProcessID="1964" ThreadID="19104" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:59:49.5534446" />
    <EventRecordID>3920</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-000d-9e5a-1b0c6621dd01" />
    <Execution ProcessID="1964" ThreadID="19596" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:59:49.6249713" />
    <EventRecordID>3921</EventRecordID>
    <Correlation ActivityID="0ba91003-2166-0000-5b24-3e0d6621dd01" />
    <Execution ProcessID="1964" ThreadID="27768" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 12:59:54.6437435" />
    <EventRecordID>3935</EventRecordID>
    <Correlation />
    <Execution ProcessID="4548" ThreadID="13844" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:16.0200695" />
    <EventRecordID>3973</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="428" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:25.7852685" />
    <EventRecordID>4043</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="7040" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:25.7872740" />
    <EventRecordID>4044</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5148" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:40.4298538" />
    <EventRecordID>4062</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5384" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:42.8347963" />
    <EventRecordID>4063</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5384" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:00:43.4263719" />
    <EventRecordID>4064</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5148" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:02:11.4036951" />
    <EventRecordID>4069</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="6704" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:02:11.4036951" />
    <EventRecordID>4070</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="5892" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:02:25.6945080" />
    <EventRecordID>4071</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0002-ddc5-86da7e22dd01" />
    <Execution ProcessID="1964" ThreadID="6704" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-02 13:06:11.6944696" />
    <EventRecordID>4074</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0000-d0b2-88da7e22dd01" />
    <Execution ProcessID="1964" ThreadID="6704" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 00:48:20.6758329" />
    <EventRecordID>4120</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="20452" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 00:48:20.6778393" />
    <EventRecordID>4121</EventRecordID>
    <Correlation />
    <Execution ProcessID="1964" ThreadID="20452" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 00:49:38.5174644" />
    <EventRecordID>4127</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0003-4f19-c9da7e22dd01" />
    <Execution ProcessID="1964" ThreadID="3060" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Tcpip" />
    <EventID Qualifiers="49152">4199</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 03:02:30.2053900" />
    <EventRecordID>4223</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="22404" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2409:40f0:100:a7db:3bd7:c4bf:c75e:84a2, 00-00-00-00-00-00</Data>
    <Binary>00-00-00-00-03-00-2C-00-00-00-00-00-67-10-00-C0-02-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DNS-Client" Guid="1c95126e-7eea-49a9-a3fe-a378b03ddb4d" />
    <EventID>1014</EventID>
    <Version>1</Version>
    <Level>3</Level>
    <Task>1014</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000010000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 03:27:32.9398272" />
    <EventRecordID>4233</EventRecordID>
    <Correlation />
    <Execution ProcessID="3380" ThreadID="26096" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="QueryName">substrate.office.com</Data>
    <Data Name="AddressLength">128</Data>
    <Data Name="Address">02-00-00-00-C0-A8-1F-01-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00</Data>
    <Data Name="ClientPID">23888</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Tcpip" />
    <EventID Qualifiers="49152">4199</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 04:40:05.6804298" />
    <EventRecordID>4314</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="15188" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2409:40f0:100:a7db:3bd7:c4bf:c75e:84a2, 00-00-00-00-00-00</Data>
    <Binary>00-00-00-00-03-00-2C-00-00-00-00-00-67-10-00-C0-02-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 08:05:34.5047579" />
    <EventRecordID>4484</EventRecordID>
    <Correlation />
    <Execution ProcessID="3532" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 08:10:40.6279573" />
    <EventRecordID>4486</EventRecordID>
    <Correlation />
    <Execution ProcessID="3532" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>225</EventID>
    <Version>2</Version>
    <Level>3</Level>
    <Task>223</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 09:10:07.9543194" />
    <EventRecordID>4503</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="24544" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ProcessId">17600</Data>
    <Data Name="ProcessNameLength">130</Data>
    <Data Name="ProcessName">\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2c508a58e5bc7f2d\RtkAudUService64.exe</Data>
    <Data Name="DeviceInstanceLength">44</Data>
    <Data Name="DeviceInstance">USB\VID_048D&amp;amp;PID_C195&amp;amp;MI_00\8&amp;amp;6993f3c&amp;amp;0&amp;amp;0000</Data>
    <Data Name="CommandLineLength">118</Data>
    <Data Name="CommandLine">"C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2c508a58e5bc7f2d\RtkAudUService64.exe" -admin</Data>
    <Data Name="VetoingDevicesLength">53</Data>
    <Data Name="VetoingDevices">HID\VID_048D&amp;amp;PID_C195&amp;amp;MI_00&amp;amp;Col02\9&amp;amp;17950691&amp;amp;0&amp;amp;0001, </Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>225</EventID>
    <Version>2</Version>
    <Level>3</Level>
    <Task>223</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 09:10:07.9543284" />
    <EventRecordID>4504</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="24544" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ProcessId">23156</Data>
    <Data Name="ProcessNameLength">91</Data>
    <Data Name="ProcessName">\Device\HarddiskVolume3\Program Files\Lenovo\LegionSpace\1.10.11.6\se\SmartEngineHost64.exe</Data>
    <Data Name="DeviceInstanceLength">44</Data>
    <Data Name="DeviceInstance">USB\VID_048D&amp;amp;PID_C195&amp;amp;MI_00\8&amp;amp;6993f3c&amp;amp;0&amp;amp;0000</Data>
    <Data Name="CommandLineLength">109</Data>
    <Data Name="CommandLine">"C:\Program Files\Lenovo\LegionSpace\1.10.11.6\se\SmartEngineHost64.exe" /service /module:501 /fun:2015_2013_</Data>
    <Data Name="VetoingDevicesLength">53</Data>
    <Data Name="VetoingDevices">HID\VID_048D&amp;amp;PID_C195&amp;amp;MI_00&amp;amp;Col02\9&amp;amp;17950691&amp;amp;0&amp;amp;0001, </Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 09:13:37.2489650" />
    <EventRecordID>4507</EventRecordID>
    <Correlation />
    <Execution ProcessID="24932" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 09:47:01.9456298" />
    <EventRecordID>4521</EventRecordID>
    <Correlation />
    <Execution ProcessID="5232" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 10:04:54.4727782" />
    <EventRecordID>4523</EventRecordID>
    <Correlation />
    <Execution ProcessID="5232" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 12:16:26.0638407" />
    <EventRecordID>4531</EventRecordID>
    <Correlation />
    <Execution ProcessID="30276" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-03 15:39:14.8606212" />
    <EventRecordID>4570</EventRecordID>
    <Correlation />
    <Execution ProcessID="33476" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 01:24:23.1696547" />
    <EventRecordID>4635</EventRecordID>
    <Correlation />
    <Execution ProcessID="36336" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.7013778" />
    <EventRecordID>4650</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0003-e2ee-0ddb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.7142891" />
    <EventRecordID>4651</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0003-b4ef-0ddb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.7460272" />
    <EventRecordID>4652</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0003-cdef-0ddb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.7617885" />
    <EventRecordID>4653</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-000a-5297-2ddb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.7937093" />
    <EventRecordID>4654</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-0003-1af0-0ddb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:48.8097237" />
    <EventRecordID>4655</EventRecordID>
    <Correlation ActivityID="da84c2b0-227e-000b-54d7-0edb7e22dd01" />
    <Execution ProcessID="1964" ThreadID="30480" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">{00000000-0000-0000-0000-000000000000}</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="9580d7dd-0379-4658-9870-d5be7d52d6de" />
    <EventID>10002</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:29:56.5568001" />
    <EventRecordID>4670</EventRecordID>
    <Correlation />
    <Execution ProcessID="4612" ThreadID="6244" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ExtensibleModulePath">C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_04d5fe5c0556075c\mtkihvx.dll</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:30:18.9386758" />
    <EventRecordID>4708</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="300" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:30:22.9926374" />
    <EventRecordID>4731</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="408" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">51</Data>
    <Data Name="DriverName">HID\VID_03F0&amp;amp;PID_0B92&amp;amp;MI_03&amp;amp;Col02\8&amp;amp;1258ebc2&amp;amp;0&amp;amp;0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:30:40.5569149" />
    <EventRecordID>4794</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="2384" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:30:41.2569349" />
    <EventRecordID>4795</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="2384" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:31:41.3398303" />
    <EventRecordID>4800</EventRecordID>
    <Correlation ActivityID="2e96176b-23b9-000f-4109-972eb923dd01" />
    <Execution ProcessID="1968" ThreadID="3996" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:32:14.3051745" />
    <EventRecordID>4804</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="2384" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:32:14.3051745" />
    <EventRecordID>4805</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="5236" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:32:28.5659142" />
    <EventRecordID>4810</EventRecordID>
    <Correlation ActivityID="2e95c919-23b9-0002-f85f-972eb923dd01" />
    <Execution ProcessID="1968" ThreadID="4004" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:38:57.0772940" />
    <EventRecordID>4813</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="11832" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:38:57.0782942" />
    <EventRecordID>4814</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="11832" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:38:57.0782942" />
    <EventRecordID>4815</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="11832" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 02:38:57.0793951" />
    <EventRecordID>4816</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="11832" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-04 08:14:29.9643434" />
    <EventRecordID>4855</EventRecordID>
    <Correlation ActivityID="2e95c919-23b9-0005-ef97-b22eb923dd01" />
    <Execution ProcessID="12824" ThreadID="18812" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9MV0B5HZVK9Z-Microsoft.GamingApp</Data>
    <Data Name="updateGuid">0158217b-ccde-4920-9329-12858824a8ff</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 11:16:59.2322595" />
    <EventRecordID>4872</EventRecordID>
    <Correlation ActivityID="2e95c919-23b9-0005-8832-e82eb923dd01" />
    <Execution ProcessID="1968" ThreadID="27412" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">5319275A.WhatsAppDesktop_2.2629.100.0_x64__cv1g1gvanyjgm</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 12:38:24.2073028" />
    <EventRecordID>4879</EventRecordID>
    <Correlation />
    <Execution ProcessID="26976" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 12:40:25.2870688" />
    <EventRecordID>4881</EventRecordID>
    <Correlation />
    <Execution ProcessID="26976" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:04:45.1217382" />
    <EventRecordID>4882</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="6196" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:08:46.3200551" />
    <EventRecordID>4883</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="6196" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:12:47.5010816" />
    <EventRecordID>4884</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="6196" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:16:48.8757746" />
    <EventRecordID>4885</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="6196" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.AppCaptureManager</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:20:50.0340588" />
    <EventRecordID>4888</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="30640" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:24:51.1384527" />
    <EventRecordID>4889</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28588" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.AppCaptureManager</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:28:52.4337239" />
    <EventRecordID>4890</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="16956" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:32:53.5428327" />
    <EventRecordID>4892</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="16956" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:36:54.7987073" />
    <EventRecordID>4893</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="16956" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-04 15:40:56.0789640" />
    <EventRecordID>4894</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="16956" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:04:36.7731741" />
    <EventRecordID>4932</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:08:37.9098219" />
    <EventRecordID>4933</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:12:39.2602644" />
    <EventRecordID>4934</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="32700" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.AppCaptureManager</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:16:40.4559363" />
    <EventRecordID>4935</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:20:41.6898644" />
    <EventRecordID>4938</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="2996" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.AppCaptureManager</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:24:42.8840204" />
    <EventRecordID>4939</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:28:43.9741772" />
    <EventRecordID>4940</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:32:45.1100719" />
    <EventRecordID>4941</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10029</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 03:36:46.2710244" />
    <EventRecordID>4942</EventRecordID>
    <Correlation />
    <Execution ProcessID="1968" ThreadID="28772" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">Windows.Media.Capture.Internal.AppCaptureShell</Data>
    <Data Name="param2">BcastDVRUserService_a26a2</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-05 04:49:52.4239131" />
    <EventRecordID>4964</EventRecordID>
    <Correlation ActivityID="2e96176b-23b9-000f-5c52-1d30b923dd01" />
    <Execution ProcessID="11344" ThreadID="4344" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9MV0B5HZVK9Z-Microsoft.GamingApp</Data>
    <Data Name="updateGuid">0158217b-ccde-4920-9329-12858824a8ff</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="945a8954-c147-4acd-923f-40c45405a658" />
    <EventID>20</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000028</Keywords>
    <TimeCreated SystemTime="2026-08-05 04:50:01.2256074" />
    <EventRecordID>4969</EventRecordID>
    <Correlation ActivityID="2e95c919-23b9-0004-dca5-6f2fb923dd01" />
    <Execution ProcessID="11344" ThreadID="33256" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="errorCode">0x80073D02</Data>
    <Data Name="updateTitle">9MSMLRH6LZF3-Microsoft.WindowsNotepad</Data>
    <Data Name="updateGuid">1a189fc9-5b03-4b39-8a2b-d4f97cbaba7a</Data>
    <Data Name="updateRevisionNumber">1</Data>
    <Data Name="serviceGuid">855e8a7c-ecb4-4ca3-b045-1dfa50104289</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:53.8657335" />
    <EventRecordID>5001</EventRecordID>
    <Correlation />
    <Execution ProcessID="3316" ThreadID="3396" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>10:13:47 AM, ‎8/‎5/‎2026, 94413</Data>
    <Binary>EA-07-08-00-03-00-05-00-0A-00-0D-00-2F-00-6C-03-EA-07-08-00-03-00-05-00-04-00-2B-00-2F-00-6C-03-60-09-00-00-3C-00-00-00-01-00-00-00-60-09-00-00-01-00-00-00-B0-04-00-00-01-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-HAL" Guid="63d1e632-95cc-4443-9312-af927761d52a" />
    <EventID>15</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:41.8801721" />
    <EventRecordID>5009</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SourceId">768</Data>
    <Data Name="FaultInformation">17032193424</Data>
    <Data Name="FaultReason">6</Data>
    <Data Name="ExtendedData">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="volmgr" />
    <EventID Qualifiers="4">162</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:42.9809325" />
    <EventRecordID>5017</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="448" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\HarddiskVolume3</Data>
    <Binary>00-00-00-00-01-00-00-00-00-00-00-00-A2-00-04-00-5A-11-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="331c3b3a-2005-44c2-ac5e-77220c37d6b4" />
    <EventID>41</EventID>
    <Version>10</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000400000000002</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:43.1767964" />
    <EventRecordID>5021</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">307</Data>
    <Data Name="BugcheckParameter1">0x1</Data>
    <Data Name="BugcheckParameter2">0x1E00</Data>
    <Data Name="BugcheckParameter3">0xFFFFF800B79C53C8</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">0</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
    <Data Name="BootAppStatus">0</Data>
    <Data Name="Checkpoint">16</Data>
    <Data Name="ConnectedStandbyInProgress">False</Data>
    <Data Name="SystemSleepTransitionsToOn">4</Data>
    <Data Name="CsEntryScenarioInstanceId">34</Data>
    <Data Name="BugcheckInfoFromEFI">False</Data>
    <Data Name="CheckpointStatus">0</Data>
    <Data Name="CsEntryScenarioInstanceIdV2">34</Data>
    <Data Name="LongPowerButtonPressDetected">False</Data>
    <Data Name="LidReliability">False</Data>
    <Data Name="InputSuppressionState">0</Data>
    <Data Name="PowerButtonSuppressionState">0</Data>
    <Data Name="LidState">1</Data>
    <Data Name="WHEABootErrorCount">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:46.2514521" />
    <EventRecordID>5027</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="448" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:50.5134560" />
    <EventRecordID>5050</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="416" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">51</Data>
    <Data Name="DriverName">HID\VID_03F0&amp;amp;PID_0B92&amp;amp;MI_03&amp;amp;Col02\8&amp;amp;1258ebc2&amp;amp;0&amp;amp;0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="abce23e7-de45-4366-8631-84fa6c525952" />
    <EventID>1001</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:12:53.2230692" />
    <EventRecordID>5065</EventRecordID>
    <Correlation />
    <Execution ProcessID="1668" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">0x00000133 (0x0000000000000001, 0x0000000000001e00, 0xfffff800b79c53c8, 0x0000000000000000)</Data>
    <Data Name="param2">C:\Windows\Minidump\080526-12078-01.dmp</Data>
    <Data Name="param3">dc388edd-f81f-4308-aadb-e3527eaeef4e</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:13:22.9555171" />
    <EventRecordID>5112</EventRecordID>
    <Correlation />
    <Execution ProcessID="1808" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:05.7996325" />
    <EventRecordID>5117</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="5748" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:05.8449196" />
    <EventRecordID>5118</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="3036" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:07.3648735" />
    <EventRecordID>5119</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="1992" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:08.1261087" />
    <EventRecordID>5120</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="2476" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:41.6714551" />
    <EventRecordID>5121</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="3068" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:41.6714551" />
    <EventRecordID>5122</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="19324" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:54.3023274" />
    <EventRecordID>5123</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="19324" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:54.3056261" />
    <EventRecordID>5124</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="6028" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:54.3056261" />
    <EventRecordID>5125</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="6028" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:54.3056261" />
    <EventRecordID>5126</EventRecordID>
    <Correlation />
    <Execution ProcessID="1960" ThreadID="6028" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">LOCAL SERVICE</Data>
    <Data Name="param8">S-1-5-19</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:14:55.9543640" />
    <EventRecordID>5127</EventRecordID>
    <Correlation ActivityID="0aa043a2-2499-000a-62e8-a10a9924dd01" />
    <Execution ProcessID="1960" ThreadID="5556" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 05:15:09.7011155" />
    <EventRecordID>5128</EventRecordID>
    <Correlation ActivityID="0aa043a2-2499-000d-8403-a10a9924dd01" />
    <Execution ProcessID="1960" ThreadID="5748" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 06:59:57.2381995" />
    <EventRecordID>5160</EventRecordID>
    <Correlation ActivityID="0aa043a2-2499-000e-0bb6-b80a9924dd01" />
    <Execution ProcessID="1960" ThreadID="10348" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
    <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:10:02.8591811" />
    <EventRecordID>5175</EventRecordID>
    <Correlation />
    <Execution ProcessID="3324" ThreadID="3400" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>12:02:53 PM, ‎8/‎5/‎2026, 4812</Data>
    <Binary>EA-07-08-00-03-00-05-00-0C-00-02-00-35-00-96-03-EA-07-08-00-03-00-05-00-06-00-20-00-35-00-96-03-60-09-00-00-3C-00-00-00-01-00-00-00-60-09-00-00-01-00-00-00-B0-04-00-00-01-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="volmgr" />
    <EventID Qualifiers="4">162</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:09:51.9897560" />
    <EventRecordID>5190</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="452" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\HarddiskVolume3</Data>
    <Binary>00-00-00-00-01-00-00-00-00-00-00-00-A2-00-04-00-6B-18-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00</Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="331c3b3a-2005-44c2-ac5e-77220c37d6b4" />
    <EventID>41</EventID>
    <Version>10</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000400000000002</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:09:52.1796371" />
    <EventRecordID>5194</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">278</Data>
    <Data Name="BugcheckParameter1">0xFFFF838DD0D76050</Data>
    <Data Name="BugcheckParameter2">0xFFFFF80749C11050</Data>
    <Data Name="BugcheckParameter3">0xFFFFFFFFC000009A</Data>
    <Data Name="BugcheckParameter4">0x4</Data>
    <Data Name="SleepInProgress">0</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
    <Data Name="BootAppStatus">0</Data>
    <Data Name="Checkpoint">0</Data>
    <Data Name="ConnectedStandbyInProgress">False</Data>
    <Data Name="SystemSleepTransitionsToOn">0</Data>
    <Data Name="CsEntryScenarioInstanceId">4</Data>
    <Data Name="BugcheckInfoFromEFI">False</Data>
    <Data Name="CheckpointStatus">0</Data>
    <Data Name="CsEntryScenarioInstanceIdV2">4</Data>
    <Data Name="LongPowerButtonPressDetected">False</Data>
    <Data Name="LidReliability">False</Data>
    <Data Name="InputSuppressionState">0</Data>
    <Data Name="PowerButtonSuppressionState">0</Data>
    <Data Name="LidState">1</Data>
    <Data Name="WHEABootErrorCount">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:09:55.2581492" />
    <EventRecordID>5200</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="408" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">16</Data>
    <Data Name="DriverName">ROOT\SYSTEM\0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="9c205a39-1250-487d-abd7-e831c6290539" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000002000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:09:59.5150143" />
    <EventRecordID>5223</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="304" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriverNameLength">51</Data>
    <Data Name="DriverName">HID\VID_03F0&amp;amp;PID_0B92&amp;amp;MI_03&amp;amp;Col02\8&amp;amp;1258ebc2&amp;amp;0&amp;amp;0001</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="abce23e7-de45-4366-8631-84fa6c525952" />
    <EventID>1001</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:10:02.2212451" />
    <EventRecordID>5238</EventRecordID>
    <Correlation />
    <Execution ProcessID="1660" ThreadID="1664" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">0x00000116 (0xffff838dd0d76050, 0xfffff80749c11050, 0xffffffffc000009a, 0x0000000000000004)</Data>
    <Data Name="param2">C:\Windows\Minidump\080526-12078-02.dmp</Data>
    <Data Name="param3">9466a7c3-a015-4a99-a748-c5cafc4147ef</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="abce23e7-de45-4366-8631-84fa6c525952" />
    <EventID>1019</EventID>
    <Version>1</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:10:02.2212467" />
    <EventRecordID>5239</EventRecordID>
    <Correlation />
    <Execution ProcessID="1660" ThreadID="1664" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="SuspectedDriver">nvlddmkm.sys</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Display" />
    <EventID Qualifiers="0">4123</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:10:31.7789406" />
    <EventRecordID>5286</EventRecordID>
    <Correlation />
    <Execution ProcessID="4368" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security />
  </System>
  <EventData>
    <Data></Data>
    <Binary></Binary>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:11:46.6410175" />
    <EventRecordID>5291</EventRecordID>
    <Correlation />
    <Execution ProcessID="1940" ThreadID="16136" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:11:46.7218556" />
    <EventRecordID>5292</EventRecordID>
    <Correlation />
    <Execution ProcessID="1940" ThreadID="2000" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-21-2115207358-3026757124-1729800344-1002" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscCloudBackupProvider</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">Girish-PK</Data>
    <Data Name="param7">giris</Data>
    <Data Name="param8">S-1-5-21-2115207358-3026757124-1729800344-1002</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:11:50.6679188" />
    <EventRecordID>5293</EventRecordID>
    <Correlation />
    <Execution ProcessID="1940" ThreadID="16136" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:11:50.6679188" />
    <EventRecordID>5294</EventRecordID>
    <Correlation />
    <Execution ProcessID="1940" ThreadID="2000" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Launch</Data>
    <Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
    <Data Name="param5">Unavailable</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
<Event>
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2026-08-05 07:12:04.9579830" />
    <EventRecordID>5295</EventRecordID>
    <Correlation ActivityID="683164da-24a9-0002-5417-3368a924dd01" />
    <Execution ProcessID="1940" ThreadID="4212" />
    <Channel>System</Channel>
    <Computer>Girish-PK</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data>
    <Data Name="param5">{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">NETWORK SERVICE</Data>
    <Data Name="param8">S-1-5-20</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
  </EventData>
</Event>
