ElfFileMBdElfChnkMM ^f(Xʽ:b=f?mMF &**L( io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  >V! @L(pt< Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >5 >5ӓY)US\rf:D EventDataA=boData= ScenarioId 0Z?9KCbt**`b9 io&  >V#! @`b9pT Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**hS9 io&  >V! i@S9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  ~ J>:A+b= ScenarioId A+b= InstanceId A;b-=OriginalActivityId AIb;=DiagnosticModuleImageName A;b-=DiagnosticModuleId @'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 8lh**9 io&  >V=!s@9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational !!f҈;X9J>:A+b= ScenarioId A+b= InstanceId A;b-=OriginalActivityId AIb;=DiagnosticModuleImageName A/b!= ResolutionId A1b#= ResolutionSID A=b/=ResolutionSessionId AGb9=ResolutionExpirationDate A;b-=DiagnosticModuleId  @ 'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 87-6H_ 8y**`b9 io&  >V!}@`b9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 8"**e9 io&  >V!@e9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 8s.**޻9 io&  >V!}@޻9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 8m**޻9 io&  >V!@޻9YŖJIpr78 Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X YŖJIpr7%windir%\system32\netdiagfx.dll7-6H_ 8ndo** tr> io&  >V! i@ tr>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 8en**@ St> io&  >V!s@St>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational ! @ 'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 87-6H_ 8ecu@** ɘt> io&  >V!}@ɘt>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 8nt** ɘt> io&  >V!@ɘt>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 8** +#u> io&  >V!}@+#u>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 8**+#u> io&  >V!@+#u>/ NZ@Y Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  @'cKO\X / NZ@Y%windir%\system32\netdiagfx.dll7-6H_ 8A**A io&  >V#! @Ap2Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtme**bO io&  >V#! @bOp1Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtati**ݥ&5V io&  >V#! @ݥ&5VpHMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt **Na io&  >V#! @Nap)pMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**a io&  >V#! @ap^Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtrs**lwp io&  >V#! @lwppD1PMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtID**%  io&  >V#! @% p80Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtMic**{ W  io&  >V#! @{ W po,Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**Z⑄ io&  >V#! @Z⑄pRMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtE{**B io&  >V#! @BpTMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbthre**MVz io&  >V#! @MVzpTMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtgQ**o io&  >V#! @opxxMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtmi**11 io&  >V#! @11p|Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**m io&  >V#! @mpMjdMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**䮼:6 io&  >V#! @䮼:6p ><Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbta**E= io&  >V! d@E= "cԶF KQr?\Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցg "cԶF KQr?A)BhA%windir%\system32\radardt.dll>.R8RIk#5D**E= io&  >V! i@E= "cԶF KQr?\Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցg "cԶF KQr?A)BhA%windir%\system32\radardt.dll>.R8RIk#5D** > io&  >V#! @>pVfh Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt`'Sy**!nItX io&  >V#! @nItXpO!Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtof**"h7] io&  >V#! @h7]pCa "Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt; **#.d io&  >V#! @.dp#Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt-00**$ io&  >V#! @p v$Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbto**%1٠x io&  >V#! @1٠xpV%Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtte**&BFt io&  >V#! @BFtp,hH&Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtnt**'>~^ io&  >V#! @>~^pjz'Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt!**(^g) io&  >V#! @^g)pJ$(Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtNa**),^g  io&  >V#! @,^g pkD)Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtA=***Zl' io&  >V#! @Zl'W"Ա *Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtit**+l5 io&  >V#! @l5pC+Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**,{#A io&  >V#! @{#Ap|!,Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**-,4' B io&  >V#! @,4' Bp+-Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtrs**.iD6V io&  >V#! @iD6Vpt!.Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtuti**/X+U io&  >V#! @X+Up /Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtws-**0  io&  >V#! @ px0Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**1r(q io&  >V#! @r(qp; 1Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtO**28N.v io&  >V#! @8N.vps(2Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtCh**3Wg} io&  >V#! @Wg}p3Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt **4v> io&  >V#! @v>pQ04Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtin**56. io&  >V#! @6.p:5Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbteat**6V#! @50Z?9KCbt532**7 Ԓ' io&  >V#! @ Ԓ'p|)7Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtK**8- io&  >V#! @-W"/HP8Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt{P**9s&zv io&  >V#! @s&zvpL9Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtD**:D_h io&  >V#! @D_hpJ:Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**;`h! io&  >V#! @`h!p^@ ;Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtumb**<D io&  >V! d@D_&-3@]r<Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցg_&-3@]rA)BhA%windir%\system32\radardt.dll>.R8RIk#5D**=D io&  >V! i@D_&-3@]r=Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցg_&-3@]rA)BhA%windir%\system32\radardt.dll>.R8RIk#5D**>a_ io&  >V#! @a_pi:>Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbte**?%Omg io&  >V#! @%Omgp';?Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtde**@smH io&  >V#! @smHpo@Microsoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtm**AkO io&  >V#! @kOpAMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**B*Yj3h io&  >V#! @*Yj3hp BMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**CMښ io&  >V#! @MښpExCMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt) **D0[ io&  >V#! @0[peDMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtted**EJl io&  >V! d@Jln*/"Hxg&EMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցgn*/"Hxg&A)BhA%windir%\system32\radardt.dll>.R8RIk#5Dt**FJl io&  >V! i@Jln*/"Hxg&FMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  <J:AĤO\Ցgn*/"Hxg&A)BhA%windir%\system32\radardt.dll>.R8RIk#5D**GAy io&  >V#! @AypeGMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtorr**H.pf{ io&  >V#! @.pf{p<'HMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**I{+ io&  >V#! @{+g&H(IMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**JBH io&  >V#! @BHpeJMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtlif**KB^r io&  >V#! @B^rp4KMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtivi**L&: io&  >V#! @&:pi1vLMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbt**MȬ  io&  >V#! @Ȭ p MMicrosoft-Windows-Diagnosis-DPSQ8k~,MT1)Microsoft-Windows-Diagnosis-DPS/Operational  >50Z?9KCbtכ|ڈA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxCMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  C \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxEMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  E \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxGMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  G \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxIMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  I \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxKMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  K \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxMMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  M \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxOMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  O \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxQMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  Q \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"SxSMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  Sw_ ZCjw}>A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemA{ProviderFKNameService Control ManagerF)Guid&{555908d1-a6d7-4695-8e1e-26931d2012f4}`EventSourceNameService Control ManagerA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityIDAU Execution8F ProcessID9ThreadID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! $!oS 4v*M^pD EventDataA7oDataKNameparam1 A7oDataKNameparam2 !Binary  IP Helper%%1058iphlpsvc zZB xt>%{'R DA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAB{Provider'KName e1iexpressA=aEventID) QualifiersdLevelE{TaskjKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! !x F%g>9{p(`TD EventDataoData!Binary,,Intel(R) I350 CSFQQ~ޏc,0 `H xt>%{'R DA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAB{Provider'KName e1iexpressA=aEventID) QualifiersdLevelE{TaskjKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! !wt F%g>9{p(`TD EventDataoData!Binary2,Intel(R) I350 CSFQQ~ޏc #2,0  iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.Securit