ElfFileҕElfChnkx &*V~=f?mMF/&**xq. io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID ! JVI! q.R| J-N*Microsoft-Windows-Kernel-EventTracing7uHFMN3GTdMicrosoft-Windows-TWinUI/Operational HcV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exeC:\Windows\system32\@TileEmpty1x1Image.pngp**  io& BH!" " @ W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc6VMicrosoft.Windows.ComputerC:\Windows\system32\@TileEmpty1x1Image.png**X  io& BH!" " @ W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc~VMicrosoft.AutoGenerated.{5E8FC15D-96C5-8C7D-B1AF-2757B67E4C6D}C:\Windows\system32\@TileEmpty1x1Image.pngX**H io& BH!" " @W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**H io& BH!" " @W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcrV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exeC:\Windows\system32\@TileEmpty1x1Image.pngH**  io& BH!" " @W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcLVMicrosoft.Windows.AdministrativeToolsC:\Windows\system32\@TileEmpty1x1Image.png ** _ io& BH!" " @_W"l J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc>VMicrosoft.Windows.ControlPanelC:\Windows\system32\@TileEmpty1x1Image.png**H _ io& BH!" " @_l~ J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-80.pngH**( G io& BH!" " @Gl~ J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc4rMicrosoft.Windows.DesktopC:\Windows\DesktopTileResources\images\logo.scale-80.png(** i. io& BH5!@i.RS J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[!i%|EL~@A3h%=NotificationId A5h'=OperationStatus A3h%=IsSpecialToast  A%h=AppType  @**H b/ io& BH!" " @b/RS J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngH**HB io& BHk!DD@HB  d J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&U&ٺ/ <0@A#h=Reason **HZ/KB io& BH!" " @Z/KB  J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**HOB io& BH!" " @OB  J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngH**HOB io& BH!" " @OB  J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-80.pngH**p6VB io& BH!" " @6VBrl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exeC:\Windows\system32\@TileEmpty1x1Image.pngp**6VB io& BH!" " @6VBrl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc6VMicrosoft.Windows.ComputerC:\Windows\system32\@TileEmpty1x1Image.png**X6VB io& BH!" " @6VBrl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc~VMicrosoft.AutoGenerated.{5E8FC15D-96C5-8C7D-B1AF-2757B67E4C6D}C:\Windows\system32\@TileEmpty1x1Image.pngX**HD io& BH!" " @Drl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-100.pngH**HD io& BH!" " @Drl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcrV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exeC:\Windows\system32\@TileEmpty1x1Image.pngH** D io& BH!" " @Drl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcLVMicrosoft.Windows.AdministrativeToolsC:\Windows\system32\@TileEmpty1x1Image.png **G io& BH!" " @Grl~S , J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Hc>VMicrosoft.Windows.ControlPanelC:\Windows\system32\@TileEmpty1x1Image.png**  io& BH/!@ RR J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @**(. io& BH!@.RR J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Y+@YN3GTdMicrosoft-Windows-TWinUI/Operational C&**HE io& BH!" " @EI5"I5"x| J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**H̯E io& BH!" " @̯EI5"I5"x| J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngH**H̯E io& BH!" " @̯EI5"I5"x| J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-80.pngH**neH io& BH9!hi@neHI5"I5"x, J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &JC&&| p)c@** +x; io& BH!DD@+x;W" J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**H!Bx; io& BH!" " @Bx;W"\ !J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**H"$x; io& BH!" " @$x;W"\ "J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngH**H#$x; io& BH!" " @$x;W"\ #J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-80.pngH**x$ @n; io& BH!hi@ @n;W"$J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &Jx**%F/9 io& BH!DD@F/9W" %J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**H&%: 29 io& BH!" " @%: 290T, &J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**H'$29 io& BH!" " @$290T, 'J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngH**H($29 io& BH!" " @$290T, (J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\smallLogo.scale-80.pngH**)?9 io& BH/!@?9 )J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @**X*f v9 io& BH!@f v9 *J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational X `X +ZD(@A3h%=NotificationId A3h%=IsSpecialToast  A%h=AppType  @X**+=Y : io& BH!DD@=Y :W"T+J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**, P; io& BH!DD@ P;W"T,J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**-PT; io& BH!DD@PT;P-J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**.KkU; io& BH!DD@KkU;99.J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**/5D> io& BH/!@5D>W"T/J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @**0%QJ> io& BH!DD@%QJ>W"T0J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**H1S> io& BH!" " @S>W"T 1J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcFMicrosoft.InternetExplorer.DefaultC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngH**2> io& BH!@>@ T 2J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational Y+@ **3(_> io& BH!DD@(_>T3J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**4dzA io& BH!DD@dzAW"'  4J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**5HA io& BH!DD@HAW"'2 5J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**6UзRE io& BH!DD@UзREW"'2 6J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**7vO io& BH!DD@vOW"n`7J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**8%@Q io& BH!DD@%@QW"n18J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**9ܩyQ io& BH!DD@ܩyQW"n19J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**:c/׳V io& BH!DD@c/׳VW" :J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**;t=] io& BH!DD@t=]W"d ;J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**@<'Jj` io& BH!" " @'Jj`W"<J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcfV{2D7E9DE7-3C79-497F-9294-C060984F4BD8}\7654OmȉhV.lnkC:\Windows\system32\@TileEmpty1x1Image.png@**=JNf` io& BH/!@JNf`p=J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @**> ` io& BH!DD@ `@d >J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**?\H|a io& BH!DD@\H|ad ?J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**x@N;a io& BH!hi@N;ad @J-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &Jx**Aa io& BH!DD@aW"$AJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**xBAa io& BH!hi@Aa)BJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &Jx**C'0CBa io& BH!DD@'0CBaW"D<CJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**DBs}d io& BH!DD@Bs}dW"8DDJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**@E#^{}d io& BH!" " @#^{}dW"8DEJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcfV{2D7E9DE7-3C79-497F-9294-C060984F4BD8}\7654OmȉhV.lnkC:\Windows\system32\@TileEmpty1x1Image.png@**Fݐe io& BH!DD@ݐeW"8DFJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**G8Zg5f io& BH!DD@8Zg5fW"8DGJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**Hvf io& BH!DD@vfW"8DHJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**InmWi io& BH!DD@nmWiW"8DIJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**J-o io& BH!DD@-oW"8DJJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**@K5o io& BH!" " @5oW"8D,KJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational HcfV{2D7E9DE7-3C79-497F-9294-C060984F4BD8}\7654OmȉhV.lnkC:\Windows\system32\@TileEmpty1x1Image.png@**Lp io& BH!DD@prD1H LJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**Mnk io& BH!DD@nkW"@ MJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**NTP io& BH!DD@TPq`>r`@ NJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**xOq5  io& BH!hi@q5 q`q`@ OJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &Jx**P  io& BH!DD@ W"`PJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**Q[ io& BH!DD@[W"oQJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**R ]+ io& BH!DD@ ]+W"oRJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**Sl io& BH!DD@lW"oSJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**T( io& BH!DD@(W"oTJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**U4܏3 io& BH!DD@4܏3W"oUJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**V io& BH/!@V`VJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @**xW io& BH!hi@WJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational &Jx**X9X io& BH!DD@9XW"*PPXJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational C&**YҪ io& BH/!@Ҫ'L'LPXYJ-N*Microsoft-Windows-Immersive-ShellrZ1>N3GTdMicrosoft-Windows-TWinUI/Operational i[! @