ElfFile-ElfChnk..^`]72*mA =>  Qf8 ? MF&*}**m( Gۉ &Gۉ I&v˽AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID $m5DUserData!  <H! 17m(6l~( Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*Ŝ93m aN-AQxChangingDefaultPrinterjOhttp://manifests.microsoft.com/win/2005/08/windows/printing/spooler/core/eventsR> DefaultPrinterSelectedBySpooler 6 OldDefaultPrinter 6 NewDefaultPrinter   Status  8 ,Module ZMicrosoft XPS Document Writer,winspool,Ne00:spoolsv.exe**B0 Gۉ & <H! 17B0qk l8J-N*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*j-(Oray WIN7-20170308DL) Microsoft XPS Document Writerspoolsv.exeID** tI0 Gۉ &  <H! 17tI0qk EhOMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*(Oray WIN7-20170308DL) Microsoft XPS Document Writer,winspool,Ne01:spoolsv.exe **PX Gۉ &  <H! %m Xqk5dLfMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}=l$;LJjA^$PrintProcEnumDataFailedjOhttp://manifests.microsoft.com/win/2005/08/windows/printing/spooler/core/events SParam1  SParam2  SParam3 (.Oray PrintProcessor126OrayPrintProcessor.dllveP**X Gۉ &  <H! 17Xqk5dLfMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*ZMicrosoft XPS Document Writer,winspool,Ne00:spoolsv.exe**X Gۉ &  <H! 17Xqk5dLfMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*ZMicrosoft XPS Document Writer,winspool,Ne00:spoolsv.exe**(= ] Gۉ &  <Hy! %m (= ]ok kUTgMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllemT**(E7 Gۉ & <H! 17(E7W" ClJ-N*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*X-(Oray LAPTOP-9HKUS0UP) Send To OneNote 2016spoolsv.exe** *2A Gۉ & <H! 17*2AW"6 J-N*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*ZMicrosoft XPS Document Writer,winspool,Ne00:spoolsv.exe** 0 Gۉ & <H! 170q(\(4 J-N*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*<-(Oray Fox-HP) Send To OneNotespoolsv.exe E**  wd^ Gۉ &  <H! 17wd^q@DA Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*(Oray UAUP3451HO499G9) Microsoft XPS Document Writer,winspool,Ne01:spoolsv.exeof ** d^ Gۉ & <H! 17d^q@DA J-N*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*j-(Oray UAUP3451HO499G9) Microsoft XPS Document Writerspoolsv.exeent**  we^ Gۉ &  <H! 17we^o'- Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*(Oray UAUP3451HO499G9) Microsoft XPS Document Writer,winspool,Ne01:spoolsv.exeyI ** e^ Gۉ &  <H! 17e^OEyMz@aIH*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*(Oray UAUP3451HO499G9) Microsoft XPS Document Writer,winspool,Ne01:spoolsv.exev **  } Gۉ &  <H! 17  }W"RRMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin Ŝ*ZMicrosoft XPS Document Writer,winspool,Ne00:spoolsv.exe**)tE Gۉ &  <Hy! %m )tEqrJMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllU**h! Gۉ &  <Hy! %m h!W"ah|Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllQNo**͍(# Gۉ &  <Hy! %m ͍(#q^DMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllt**I0r=# Gۉ &  <Hy! %m I0r=#q^ HMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllatio**`_ Gۉ &  <Hy! %m `_qL:L`Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**!p Gۉ &  <Hy! %m !pqL:"Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll//s** Wf Gۉ &  <Hy! %m Wfq ; \pMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllyst**)8a Gۉ &  <Hy! %m )8aq ; Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**0dbH Gۉ &  <Hy! %m 0dbHqo:DXMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**TҗH Gۉ &  <Hy! %m TҗHHHthMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllode***fO Gۉ &  <Hy! %m *fOW"6dMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll532**_2h Gۉ &  <Hy! %m _2hq Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dlle**Jc Gۉ &  <Hy! %m JcqE XlMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllers**I) Gۉ &  <Hy! %m I)W"_&#DMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**ȌO Gۉ &  <Hy! %m ȌOqE'$*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll5o**"T[; Gۉ &  <Hy! %m "T[;W"wedMicrosoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dlluid** YqA Gۉ &  <Hy! %m YqAqweE1( Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll A**!H,By Gۉ &  <Hy! %m H,Byqne5H`!Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllrgQ**"{ Gۉ &  <Hy! %m {W".<Xl"Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllven**#B/9 Gۉ &  <Hy! %m B/9W".<( T #Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllrela**$A+ Gۉ &  <Hy! %m A+qHwHTh$Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**%i@n Gۉ &  <Hy! %m i@nqH5T%Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dlltp:**&c!k4v Gۉ &  <Hy! %m c!k4vqH T$&Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll<{ S**'iFeH Gۉ &  <Hy! %m iFeHqHPd'Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**(}2* Gۉ &  <Hy! %m }2*qH;%D3(Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll**)<b Gۉ &  <Hy! %m <bqH<E,<)Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllOpco***%9 Gۉ &  <Hy! %m %9q6l*Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllSSK5**+ (,N: Gۉ &  <Hy! %m (,N:W"+Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllName**,m Gۉ &  <Hy! %m mq=1v5d"#,Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dll V**-G Gۉ &  <Hy! %m Gq h|-Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllD **.%&` Gۉ &  <Hy! %m %&`q /,/A.Microsoft-Windows-PrintService~t5MBhsMicrosoft-Windows-PrintService/Admin =}(.Oray PrintProcessor126OrayPrintProcessor.dllAoDataKNameGroup A7oDataKNameNumber  3 \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx5Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  5 \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx7Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  7 \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx9Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  9 \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx;Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  ; \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx=Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  = \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQx?Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  ? \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxAMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  A \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxCMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  C \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxEMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  E \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxGMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  G \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxIMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  I \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxKMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  K \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxMMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  M \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxOMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  O \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"nQxQMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  Q \Dכ|A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-00972SSK532A2.SecurityfLUserID !  P !"SxSMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber  Sw_ ZCjw}>A Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemA{ProviderFKNameService Control ManagerF)Guid&{555908d1-a6d7-4695-8e1e-26931d2012f4}`EventSourceNameService Control ManagerA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityIDAU Execution8F ProcessID9ThreadID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! $!oS 4v*M^pD EventDataA7oDataKNameparam1 A7oDataKNameparam2 !Binary  IP Helper%%1058iphlpsvc zZB xt>%{'R DA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAB{Provider'KName e1iexpressA=aEventID) QualifiersdLevelE{TaskjKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! !x F%g>9{p(`TD EventDataoData!Binary,,Intel(R) I350 CSFQQ~ޏc,0 `H xt>%{'R DA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAB{Provider'KName e1iexpressA=aEventID) QualifiersdLevelE{TaskjKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID &aChannelSystem:;nComputerWIN-00972SSK532A2.SecurityfLUserID ! !wt F%g>9{p(`TD EventDataoData!Binary2,Intel(R) I350 CSFQQ~ޏc #2,0  iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.SecurityfLUserID !  P !"&tMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System tŸ9rIID EventDataA5oDataKNameGroup A7oDataKNameNumber   iozZgA Eventxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAA{Provider&FKName)GuidA=aEventID) Qualifiers  Version dLevelE{TaskOpcodejKeywordsA@; TimeCreated<{ SystemTime &F EventRecordID Am CorrelationLF ActivityID5RelatedActivityID AU Execution8F ProcessID9ThreadID aChannel:;nComputerWIN-3PIMCL4OH3LA2.Securit