Windows 10: "The access history in hive..." Event ID 16, normal?

Hi, I've been trying to figure this out for a long time, is Event ID 16 in the event viewer normal? It says its just information, and it usually says -"The access history in hive \??\C:\Users\<username>\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages."Is this just a normal operation? It happens probably ~7 times a day although some will be for Microsoft sechealthUI, or stickynotes, etc.Thanks guys.

:)

 

The access history in hive cleared

Hello. I had this in event viewer: Kernel-General16: "the access history in hive cleared Windowspowershell etc etc "

My Windows 10 is 1809 and 9900K stock.

In this time Battlefield 5 crashed without error in event log. Just exitted to desktop itself.

My question. That crash can be related to that Kernel-General16: "the access history in hive cleared Windowspowershell etc etc " or that doesnt matter?

 

The access history in hive cleared

Hello. I had this in event viewer: Kernel-General16: "the access history in hive cleared Windowspowershell etc etc "

My Windows 10 is 1809 and 9900K stock.

In this time Battlefield 5 crashed without error in event log. Just exitted to desktop itself.

My question. That crash can be related to that Kernel-General16: "the access history in hive cleared Windowspowershell etc etc " or that doesnt matter?

 

Related to Event Viewer activities like EVENT ID 16, KERNEL GENERAL; and with a lots of EVENT 5379, Microsoft Windows Security Auditing....

So, my PC was in sleep mode with 55 percent battery. I resumed the Pc from sleep after some time and i noticed that the PC battery was drained to 5 percent. I thought there must be some problem, i checked event viewer and noticed some processing going on in my pc when it was in sleep. The Events were like this....

* Two or Three EVENT ID 16, KERNEL GENERAL; Category None; Description: The access history in hive\??\.............

* Two or Three EVENT ID 16, KERNEL GENERAL; Category None; Description: The access history in hive\SystemRoot\.............

* A lots of (thousands of) EVENT 5379, Microsoft Windows Security Auditing, Category: User Account Management

* EVENT 4799, Microsoft Windows Security Auditing, Category: Security Group Management. Description: A security-enabled local group membership was enumerated.

* EVENT 4798, Microsoft Windows Security Auditing, Category: Security Group Management. Description: A user's local group membership was enumerated.

* Some of LOGON and SPECIAL LOGON security events with EVENT ID 4624 and 4672 respectively.

What are these events? Are these events safe to occur or some malware kind of things?