ElfFile*P ElfChnk,,\^VekAdJr=f?mMF&#E **Dw~  & \Dכ|ٖAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-00972SSK532AB.SecurityfLUserID !  F^!@Dw~ jVB Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational bo#bo>ǧw,ܞV( JD EventDataA=roData= DriverName A+r= ShimSource A)r= ShimCount A/r!= AppliedGuids Nstorahci.sys{434abafd-08fa-4c3d-a88d-d09a88e2ab17}**   &  F^Q!@ fBhMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE l= ofCJA+r= DeviceName A-r= DeviceClass A+r= FlagSource A!r=Flags  4 USB:USB\VID_090C&PID_1000USB**   &  F^w!@ fBtMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_090C&PID_1000USBSTOR**w- ioiozZgAMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FWIN-3PIMCL4OH3LA  !  F^g!@w- j~ bhMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE 4 USB:USB\VID_090C&PID_1000USB**w- io  F^w!@w- j~ b,Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_090C&PID_1000USBSTOR**& io  F^g!@&3DMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE 4 USB:USB\VID_090C&PID_1000USB**i io  F^w!@i3lMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_090C&PID_1000USBSTOR**;: io  F^w!@;:TT Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR** QA]: io  F^w!@QA]:TT Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR** : io  F^w!@:TT Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR** `P; io  F^w!@`P;TTH Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR** ]܈T; io  F^w!@]܈T;TT@ Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR** ReG> io  F^w!@ReG>TTX Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1665USBSTOR**~E> io  F^w!@~E>TTMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1665USBSTOR**|q> io  F^w!@|q>TT Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1665USBSTOR**,A io  F^w!@,AT2Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR**7Jf` io  F^w!@7Jf`TMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1666USBSTOR**&[ io  F^w!@&[TOMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**14[ io  F^w!@14[;OMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**6^ io  F^w!@6^TCadMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**^ io  F^w!@^PDaMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**%)y5` io  F^w!@%)y5`[DaZ\Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**5=` io  F^w!@5=`PDaMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**/!~` io  F^w!@/!~`PDadMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**a io  F^w!@aTCaMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**kO+a io  F^w!@kO+aPDalMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**Za io  F^w!@ZaPDalMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**O2a%b io  F^w!@O2a%bPDadMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR** &c io  F^w!@ &cPDaMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**Jc io  F^w!@JcPDa Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**d io  F^w!@dPDapMicrosoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR** 9|d io  F^w!@9|dPDa\ Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**!Zsd io  F^w!@ZsdPDap!Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**"e io  F^w!@ePDa "Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**#۶e io  F^w!@۶eTCa#Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**$9e io  F^w!@9ePDa\$Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5567USBSTOR**%e io  F^w!@ePDa\%Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**&d(m io  F^w!@d(mTCa&Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**'2lm io  F^w!@2lmPDap'Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**(W io  F^w!@WT(Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR**)Iu[ io  F^w!@Iu[T|)Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0781&PID_5591USBSTOR***DR* io  F^w!@DR*T*Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1642USBSTOR**+]Uu5+ io  F^w!@]Uu5+TT+Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1642USBSTOR**,$3- io  F^w!@$3-T,Microsoft-Windows-Kernel-ShimEngine `{MKf/e@Microsoft-Windows-Kernel-ShimEngine/Operational lE < USBSTOR:USB\VID_0951&PID_1642USBSTOR