 | 3499 | 2026-06-01 18:25:39 | 2026-06-01 18:25:39 | 2026-06-01 18:25:39 | 0 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 3652). |
 | 3497 | 2026-06-01 18:25:39 | 2026-06-02 18:25:39 | 2026-06-01 18:25:39 | 86400 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 3652). |
 | 3472 | 2026-06-02 18:02:22 | 2026-06-02 18:02:22 | 2026-06-02 18:02:22 | 0 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 4644). |
 | 3470 | 2026-06-02 18:02:22 | 2026-06-02 06:02:22 | 2026-06-02 18:02:22 | 43200 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 4644). |
 | 3467 | 2026-06-02 06:02:10 | 2026-06-02 06:02:10 | 2026-06-02 06:02:10 | 0 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 6112). |
 | 3465 | 2026-06-02 06:02:10 | 2026-06-02 03:02:09 | 2026-06-02 06:02:10 | 10801 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 6112). |
 | 3460 | 2026-06-02 03:01:51 | 2026-06-02 03:01:51 | 2026-06-02 03:01:51 | 0 | System time adjusted to the new time zone.Process: '\Device\HarddiskVolume3\Windows\System32\rundll32.exe' (PID 6112). |
 | 2203 | 2026-05-30 16:55:30 | 2026-05-30 16:55:30 | 2026-05-30 16:55:30 | 0 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\svchost.exe' (PID 2084). |
 | 1985 | 2026-05-30 16:52:54 | 2026-05-30 16:52:54 | 2026-05-30 16:52:54 | 0 | An application or system component changed the time.Process: '\Device\HarddiskVolume3\Windows\System32\svchost.exe' (PID 1124). |
 | 1903 | 2026-05-30 16:45:50 | 2026-05-30 16:45:50 | 2026-05-30 16:45:50 | 0 | System time adjusted to the new time zone.Process: '\Device\HarddiskVolume3\Windows\System32\oobe\msoobe.exe' (PID 1088). |