ElfFile^ElfChnkX(u=f?mMF*V&,[U/3(E59**@9 io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@98bfGhxy\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[r`]/iL6D EventDataASoData3=TransportProtocolName A=Port TCP= C@**9 io&  bz!!@98bfGhxy\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= 3LN**9 io&  bz!!@98bfGhxy\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= R**9 io&  bz!!@98bfGhxy\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= IN-3**A io&  bz!!@AbX7Asc29LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **A io&  bz!!@AbX7Asc29LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= me**A io&  bz!!@AbX7Asc29LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= **A io&  bz!!@AbX7Asc29LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ** *O io&  bz!!@*Ommb=pDg0 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= ** *O io&  bz!!@*Ommb=pDg0 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= imwi** NK-O io&  bz!!@NK-Ommb=pDg0 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= e ** NK-O io&  bz!!@NK-Ommb=pDg0 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ** 4V io&  bz!!@4V~b%A< P Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= y/Op**4V io&  bz!!@4V~b%A< PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= soft**4V io&  bz!!@4V~b%A< PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ne, **4V io&  bz!!@4V~b%A< PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= #F**x`Ea io&  bz!@`Ea4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD&MDٽi&6h}> nbA'=ConnType A'=ClientIP &TCP192.168.0.129:1553!x**8{% Ea io&  bz! A@{% Ea4| =uC'PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt(kPt3L4 JL@A3%=ConnectionName RDP-Tcp#08** 2$?Ea io&  bzs! @2$?Ea4| =uC'HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational *}r&TD8A+= InstanceID cen **hFa io&  bz!e@Fa4| =uC'HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0,B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).Uh**`Fa io&  bz!@Fa4| =uC'HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/\)UT4thA-= ChannelName A'=TunnelID rdplic`**Fa io&  bz)!@Fa4| =uC'HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpcmdy/Op**BFa io&  bz9!b@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3&| p)c-WMI**BFa io&  bz!d@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3A**BFa io&  bz_!e@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0,LReason Code: 1(Client not supported).A**BFa io&  bz!@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r59-rr˩-HbxlA'=TunnelID A1#= TransportType XTCP: Reason Code: 1 (No Client UDP Support)Pro** BFa io&  bzs!@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r59XTCP: Reason Code: 1 (No Client UDP Support)vse **pBFa io&  bz! B@BFa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >>&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#0YSTp**Fa io&  bz! !@Fa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3#**Fa io&  bz+!@Fa4| =uC'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpgrfx4OH**jGa io&  bz+!@jGa4| =uC'HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpinptoso**X jGa io&  bz!@jGa4| =uC'H Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`E>&`J_Tpۉ%GrfA)= MajorType A)= MinorType -WinX**!Ha io&  bz!@Ha4| =uC'!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3W**"Ha io&  bz!@Ha4| =uC'"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &32**#5{Ha io&  bz!@5{Ha4| =uC'#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3a**$Ha io&  bz!@Ha4| =uC'$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3M**% g)Ha io&  bz'!@ g)Ha4| =uC'%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/ rdpdrW**&g+Ha io&  bzA!@g+Ha4| =uC'\&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/&AUDIO_PLAYBACK_DVCe **'+.Ha io&  bzA!@+.Ha4| =uC''Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/&AUDIO_PLAYBACK_DVC{1C4**(+.Ha io&  bz)!@+.Ha4| =uC'(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpsnd9** ) 5Ka io&  bzs!g@ 5Ka4| =uC')Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xVxXEMD8A+= ReasonCode  re ***Jm7Ka io&  bz!f@Jm7Ka4| =uC'*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3**+$La io&  bzE!@$La?6 SFA<<+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD&&TCP192.168.0.129:1566T**,$La io&  bz'! A@$La?6 SFA<<P,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt(RDP-Tcp#1**-$La io&  bz! @$La?6 SFA<<-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational *W**.fAMa io&  bz_!e@fAMa?6 SFA<<.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0,LReason Code: 2(Server Configuration).v**/fAMa io&  bz)!@fAMa?6 SFA<</Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdplicT **0fAMa io&  bz)!@fAMa?6 SFA<<0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpcmd**1ZFMa io&  bz!b@ZFMa?6 SFA<< 1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3c**2ZFMa io&  bz!d@ZFMa?6 SFA<< 2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3p**3ZFMa io&  bz_!e@ZFMa?6 SFA<< 3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0,LReason Code: 1(Client not supported).e** 4ZFMa io&  bzs!@ZFMa?6 SFA<< 4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r59XTCP: Reason Code: 1 (No Client UDP Support)Ins ** 5ZFMa io&  bzs!@ZFMa?6 SFA<< 5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r59XTCP: Reason Code: 1 (No Client UDP Support)s-W **6ZFMa io&  bz/! B@ZFMa?6 SFA<<6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >>RDP-Tcp#10**7ZFMa io&  bz! !@ZFMa?6 SFA<<7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3A**8ZFMa io&  bz+!@ZFMa?6 SFA<< 8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpgrfx934**9|HMa io&  bz+!@|HMa?6 SFA<<9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpinptcro**:|HMa io&  bz!@|HMa?6 SFA<<:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`ER**;`Ma io&  bz!@`Ma?6 SFA<<\;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3M**<*gMa io&  bz!@*gMa?6 SFA<<\<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &34**=lMa io&  bz!@lMa?6 SFA<<=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3v**>X vMa io&  bz'!@X vMa?6 SFA<<\>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/ rdpdr4**?kxMa io&  bzA!@kxMa?6 SFA<<?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/&AUDIO_PLAYBACK_DVCdows**@ zMa io&  bzA!@ zMa?6 SFA<<@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/&AUDIO_PLAYBACK_DVC**A zMa io&  bz)!@ zMa?6 SFA<<\AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U/rdpsnd-WMI**Bza io&  bz!g@za?6 SFA<<BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xV A**Cza io&  bz!f@za?6 SFA<<CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3**D؋}a io&  bzE!@؋}a @HpDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD&&TCP192.168.0.129:1668em**E؋}a io&  bz'! A@؋}a @HpPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt(RDP-Tcp#2c**F؋}a io&  bz! @؋}a @Hp4FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational *w**G؋}a io&  bz!f@؋}a @HpGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3A**H؋}a io&  bz!g@؋}a @Hp4HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xVW**I硔a io&  bz!!@硔aWbEGdKIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= -Act**J硔a io&  bz!!@硔aWbEGdKJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= geDr**KIa io&  bz!!@IaWbEGdKKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= v**LIa io&  bz!!@IaWbEGdKLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= l **MZa io&  bz!!@Za6bڬ@T?0,MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **NZa io&  bz!!@Za6bڬ@T?0,NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= ITY\**OZa io&  bz!!@Za6bڬ@T?0,OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ity**PZa io&  bz!!@Za6bڬ@T?0,PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= roso**Q9 a io&  bzG!@9 a 1I;g, QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD&(TCP192.168.7.187:49191a**R9 a io&  bz'! A@9 a 1I;g,DRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt(RDP-Tcp#0D**S`!a io&  bz! @`!a 1I;g,SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ***T#Y#a io&  bz!f@#Y#a 1I;g,TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &3:**U#a io&  bz!g@#a 1I;g,UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xVt**Vy@0p io&  bz!!@y@0p[b􄛞CvdVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= rvse**Wy@0p io&  bz!!@y@0p[b􄛞CvdWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= <**X^C0p io&  bz!!@^C0p[b􄛞CvdXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= emen**Y^C0p io&  bz!!@^C0p[b􄛞CvdYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= erat**Z9 io&  bz!!@9inbbN; ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= ****[9 io&  bz!!@9inbbN; [Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= em32**\9 io&  bz!!@9inbbN; \Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= E9-0**]9 io&  bz!!@9inbbN; ]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= FRO**^k  io&  bz!!@k &b*C_84 ^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= fNc**_k  io&  bz!!@k &b*C_84 _Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= -Act**`k  io&  bz!!@k &b*C_84 `Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ctiv**ak  io&  bz!!@k &b*C_84 aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ECT **b$ io&  bz!!@$bJ*npbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= N **c$ io&  bz!!@$bJ*npcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **d ' io&  bz!!@ 'bJ*npdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ipro**e ' io&  bz!!@ 'bJ*npeMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= -88D**f io&  bz!!@.bA`\fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= T**g io&  bz!!@.bA`\gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= nkno**h io&  bz!!@.bA`\hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ctiv**i io&  bz!!@.bA`\iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= P>**j53 io&  bz!!@53hKb?7Cuk^jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= T**k53 io&  bz!!@53hKb?7Cuk^kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **l53 io&  bz!!@53hKb?7Cuk^lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= THOR**m53 io&  bz!!@53hKb?7Cuk^mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= @**nwY][ io&  bz!!@wY][bm33Amt|nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= ices**owY][ io&  bz!!@wY][bm33Amt|oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= ft-W**pwY][ io&  bz!!@wY][bm33Amt|pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= * fr**qwY][ io&  bz!!@wY][bm33Amt|qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= dows**rR靄 io&  bz!!@R靄b]Gc3uC`HPrMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= "MSS**sR靄 io&  bz!!@R靄b]Gc3uC`HPsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **tR靄 io&  bz!!@R靄b]Gc3uC`HPtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ****uR靄 io&  bz!!@R靄b]Gc3uC`HPuMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= 1}W**v5l io&  bz!!@5lbⲠG婣u0 vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **w5l io&  bz!!@5lbⲠG婣u0 wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= EM**xl io&  bz!!@lbⲠG婣u0 xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= G**yl io&  bz!!@lbⲠG婣u0 yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= - ro**zߞ5 io&  bz!!@ߞ5bBV[,zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= J{M**{ߞ5 io&  bz!!@ߞ5bBV[,{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Mic**|ߞ5 io&  bz!!@ߞ5bBV[,|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= @=**}ߞ5 io&  bz!!@ߞ5bBV[,}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= **~)Ĝ> io&  bz!!@)Ĝ>}bȝNd~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= H 2**)Ĝ> io&  bz!!@)Ĝ>}bȝNdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= \spp**)Ĝ> io&  bz!!@)Ĝ>}bȝNdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= 8249**)Ĝ> io&  bz!!@)Ĝ>}bȝNdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= nsin**c>X io&  bz!!@c>X bXE?{NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= 1-18**c>X io&  bz!!@c>X bXE?{NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= T**c>X io&  bz!!@c>X bXE?{NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= **c>X io&  bz!!@c>X bXE?{NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ITY\STEM UnknownStart IWbemServices::ExecQuery - root\cimv2 : SELECT Version FROM SoftwareLicensingService2Unknown Gۉ   <TElfChnk  ~5e=f?mMFM-=3[5&b-Q_L**@EU\ io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@EU\LbZAE_( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[r`]/iL6D EventDataASoData3=TransportProtocolName A=Port TCP= C@**EU\ io&  bz!!@EU\LbZAE_( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= 3LN**EU\ io&  bz!!@EU\LbZAE_( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= R**EU\ io&  bz!!@EU\LbZAE_( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= IN-3**? io&  bz!!@?beIa Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **? io&  bz!!@?beIa Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= me**? io&  bz!!@?beIa Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= **? io&  bz!!@?beIa Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= **x}%V$׆ io&  bz!@}%V$׆C J#L!4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝMDٽi&6h}> nbA'=ConnType A'=ClientIP (TCP192.168.2.234:10648 x**8JZ$׆ io&  bz! A@JZ$׆C J#L!0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtkPt3L4 JL@A3%=ConnectionName RDP-Tcp#0Rdp8** ba$׆ io&  bzs! @ba$׆C J#L!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M}r&TD8A+= InstanceID eDe **0/׆ io&  bz!@/׆C J#L!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m>X{3EP,{@4A'=IPString 192.168.2.234C0** E0׆ io&  bzG!@ E0׆ hwKF%S= 4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.2.234:10691** E0׆ io&  bz'! A@ E0׆ hwKF%S= 0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#1** E0׆ io&  bz! @ E0׆ hwKF%S= Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M** E0׆ io&  bz9!f@ E0׆C J#L!,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&&| p)c** kNH0׆ io&  bzs!g@kNH0׆C J#L!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(xXEMD8A+= ReasonCode TS/ **kNH0׆ io&  bz!f@kNH0׆ hwKF%S= ,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&p**kNH0׆ io&  bz!g@kNH0׆ hwKF%S= Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(**u2׆ io&  bzG!@u2׆! VK |A4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.2.234:10700**u2׆ io&  bz'! A@u2׆! VK |A0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#2**u2׆ io&  bz! @u2׆! VK |AT Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Mo**ho,2׆ io&  bz!e@o,2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)03B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**`o,2׆ io&  bz!@o,2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5m\)UT4thA-= ChannelName A'=TunnelID rdplic`**o,2׆ io&  bz)!@o,2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5rdpcmd@B**⵱2׆ io&  bz!b@⵱2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&**⵱2׆ io&  bz!d@⵱2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&d**⵱2׆ io&  bzo!@⵱2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)-=(&W)8:MG@4A'=TunnelID -**⵱2׆ io&  bz!@⵱2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)-=|**p⵱2׆ io&  bz! B@⵱2׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >A&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#2indp**D2׆ io&  bzK!@D2׆OZ5"O{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ,UDP[192.168.2.234]:57468kto**D2׆ io&  bzK!@D2׆OZ5"O{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ,UDP[192.168.2.234]:57469Cor**D2׆ io&  bz! !@D2׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&t**D2׆ io&  bz+!@D2׆! VK |APMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5rdpgrfxces**z2׆ io&  bz+!@z2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5rdpinptQB'**`z2׆ io&  bz!@z2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rL-rr˩-HbxlA'=TunnelID A1#= TransportType UDP g)H`**z2׆ io&  bzW!@z2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rL<TCP: Reason Code: 5 (Unknown)**Xz2׆ io&  bz!@z2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`-QA&`J_Tpۉ%GrfA)= MajorType A)= MinorType X**z2׆ io&  bz#!@z2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rLUDPa4|**ܸ2׆ io&  bza!@ܸ2׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5FMicrosoft::Windows::RDS::Telemetryroso**ܸ2׆ io&  bz_!@ܸ2׆! VK |AtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5DMicrosoft::Windows::RDS::Graphics**ܸ2׆ io&  bz!@ܸ2׆! VK |AtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 72׆ io&  bz! D@>2׆OZ5"O{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BbBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#2vJN_)`p**2׆ io&  bz!@2׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&**-2׆ io&  bz!@-2׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&**22׆ io&  bz!@22׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&e**gE3׆ io&  bz'!@gE3׆OZ5"O{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5 rdpdra**ç3׆ io&  bzA!@ç3׆OZ5"O{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \5&AUDIO_PLAYBACK_DVCatio** 3׆ io&  bzM!@ 3׆! VK |AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \52AUDIO_PLAYBACK_LOSSY_DVCce**ǀQ3׆ io&  bz!@ǀQ3׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&o**B׆ io&  bz!f@B׆! VK |A,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&o**v>B׆ io&  bz!g@v>B׆! VK |A Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(-**- : io&  bzG!@- :TK N.J#4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49223o**- : io&  bz'! A@- :TK N.J#0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#3e**E*0 : io&  bz! @E*0 :TK N.J#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Mo**%\: io&  bz!f@%\:TK N.J#,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&o**%\: io&  bz!g@%\:TK N.J#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(r**bh: io&  bzG!@bh: AkCMN4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49226/**bh: io&  bz'! A@bh: AkCMN0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#4r**l"eh: io&  bz! @l"eh: AkCMNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M-**ƤJs: io&  bz/!@ƤJs: AkCMNP#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.23.37-**8y: io&  bzG!@8y:P MI>4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49228r**8y: io&  bz'! A@8y:P MI>0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#5r**zy: io&  bz! @zy:P MI>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Mo**y: io&  bz/!@y:P MI>P#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.23.37e**{}: io&  bzG!@{}:{X B,4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49229/**{}: io&  bz'! A@{}:{X B,0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#6 **{}: io&  bz! @{}:{X B,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M **g}: io&  bz/!@g}:{X B,P#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.23.37**؇: io&  bzG!@؇:v xLUH{`4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49230**؇: io&  bz'! A@؇:v xLUH{`0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#7**ۇ: io&  bz! @ۇ:v xLUH{`|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MC**Ii݇: io&  bz/!@Ii݇:v xLUH{`P#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.23.37**l : io&  bz!f@l : AkCMN,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&**l : io&  bz!g@l : AkCMNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(o**༡: io&  bz!f@༡:P MI>,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&r**༡: io&  bz!g@༡:P MI>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(o**~: io&  bzG!@~:c A,=`4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.23.37:49232e**~: io&  bz'! A@~:c A,=`0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#8r**~: io&  bz! @~:c A,=`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M/**M: io&  bz/!@M:c A,=`P#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.23.37 **": io&  bz!f@":{X B,,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&/**": io&  bz!g@":{X B,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(d**: io&  bz!f@:v xLUH{`,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&o**: io&  bz!g@:v xLUH{`|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(o**%: io&  bz!f@%:c A,=`,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&-**%: io&  bz!g@%:c A,=`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(i***b io&  bzG!@*b OG4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ(TCP192.168.2.234:12846-***b io&  bz'! A@*b OG0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#9-**,d io&  bz! @,d OGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M -**g io&  bz!f@g OG,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&'**g io&  bz!g@g OGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(e**Ձ io&  bz!!@ՁKkb:C4H=|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**Ձ io&  bz!!@ՁKkb:C4H=|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**Ձ io&  bz!!@ՁKkb:C4H=|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**Ձ io&  bz!!@ՁKkb:C4H=|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**/Yx io&  bz!!@/Yxb*bZfAd,KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**/Yx io&  bz!!@/Yxb*bZfAd,KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**/Yx io&  bz!!@/Yxb*bZfAd,KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**/Yx io&  bz!!@/Yxb*bZfAd,KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**s io&  bz!!@sblJ91EpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**s io&  bz!!@sblJ91EpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**/ds io&  bz!!@/dsblJ91EpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**/ds io&  bz!!@/dsblJ91EpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**ml^ io&  bz!!@ml^b|@CE$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**ml^ io&  bz!!@ml^b|@CE$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**ml^ io&  bz!!@ml^b|@CE$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**ml^ io&  bz!!@ml^b|@CE$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**q Ǻ io&  bz!!@q Ǻ bGNL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**q Ǻ io&  bz!!@q Ǻ bGNL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**q Ǻ io&  bz!!@q Ǻ bGNL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**q Ǻ io&  bz!!@q Ǻ bGNL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**H:   io&  bz!!@H:  Gba-D># Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**H:   io&  bz!!@H:  Gba-D># Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= Core**H:   io&  bz!!@H:  Gba-D># Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**H:   io&  bz!!@H:  Gba-D># Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= Core**\ io&  bzI!@\ ['F8(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ*TCP192.168.24.255:49205oft-**n" io&  bz'! A@n" ['F8(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#0-**( io&  bz! @( ['F8(dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Mi**] io&  bz1!@] ['F8(^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.24.255oft-**g' io&  bz!f@g' ['F8(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&'**g' io&  bz!g@g' ['F8(dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(e**!W io&  bzI!@!W( +KR>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ*TCP192.168.24.255:49208oft-**!W io&  bz'! A@!W( +KR>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#1-**!W io&  bz! @!W( +KR>^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Mi**3Sb io&  bz1!@3Sb( +KR>^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >m192.168.24.255oft-**!HɌ io&  bz!f@!HɌ( +KR>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&'**!HɌ io&  bz!g@!HɌ( +KR>^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x(e** r io&  bzI!@r AV}W Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŝ*TCP192.168.24.255:49211oft-ndows-RemoteDesktopServices-RdpCoreTS/Operational ElfChnk  Ye=f?mMF ![m7*** r io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz! A@r AV}W Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[kPt3L4 JznD EventDataAEoData%=ConnectionName RDP-Tcp#2**  r io&  bzs! @r AV}W >X{3EP,{@4A'=IPString 192.168.24.255@E8**x sᑼ io&  bz!@sᑼ ں#@hO Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDMDٽi&6h}> nbA'=ConnType A'=ClientIP *TCP192.168.24.255:49214ix**sᑼ io&  bz'! A@sᑼ ں#@hOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#3i**sᑼ io&  bz! @sᑼ ں#@hOFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ 9**5$ io&  bz9!f@5$ ں#@hOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&| p)ccros** 5$ io&  bzs!g@5$ ں#@hOFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+= ReasonCode Cor **% io&  bzI!@% 4!B9ya4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49215ices**% io&  bz'! A@% 4!B9ya4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#4**% io&  bz! @% 4!B9ya4|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ **ho֨ io&  bz!e@o֨ 4!B9ya4bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**`o֨ io&  bz!@o֨ 4!B9ya4bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \! \)UT4thA-= ChannelName A'=TunnelID rdplicot`**o֨ io&  bz)!@o֨ 4!B9ya4bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpcmdeDes**$ io&  bz!b@$ 4!B9ya4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &t**$ io&  bz!d@$ 4!B9ya4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**$ io&  bz_!e@$ 4!B9ya4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 1(Client not supported).**$ io&  bz!@$ 4!B9ya4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*-rr˩-HbxlA'=TunnelID A1#= TransportType XTCP: Reason Code: 1 (No Client UDP Support)per** $ io&  bzs!@$ 4!B9ya4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support)** **p io&  bz! B@ 4!B9ya4^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >/&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#4 p**K io&  bz! !@K 4!B9ya4^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**K io&  bz+!@K 4!B9ya4cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpgrfx** _Ó io&  bz+!@_Ó 4!B9ya4b Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpinpt**X!_Ó io&  bz!@_Ó 4!B9ya4b!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`m7/&`J_Tpۉ%GrfA)= MajorType A)= MinorType **X**" io&  bz!@ 4!B9ya4^"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**# I io&  bz!@ I 4!B9ya4^#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**$ I io&  bz!@ I 4!B9ya4^$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**%j io&  bz!@j 4!B9ya4g%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &e**&[ io&  bz'!@[ 4!B9ya4^&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \! rdpdrr**'L io&  bzA!@L 4!B9ya4g'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCeDes**(  io&  bzA!@  4!B9ya4g(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCemot**)  io&  bz)!@  4!B9ya4^)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpsndroso***E io&  bz!g@E 4!B9ya4(3*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x W**+< io&  bz!f@< 4!B9ya4+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**,`ü io&  bz!f@`ü AV}W,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &!**-`ü io&  bz!g@`ü AV}W 192.168.24.255 Mi**2f  io&  bzI!@f v a$Ds.2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49217Core**3f  io&  bz'! A@f v a$Ds.3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#6R**4f  io&  bz! @f v a$Ds.df4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ **5m io&  bz!f@mv a$Ds.5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**6m io&  bz!g@mv a$Ds.df6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x-**7}2 io&  bzI!@}2- ÂKF7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49218Moni**8}2 io&  bz'! A@}2- ÂKF8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#7c**9}2 io&  bz! @}2- ÂKF(D9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ o**:Y io&  bz_!e@Y- ÂKF?:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).e**;Y io&  bz)!@Y- ÂKF?;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpliccros**<Y io&  bz)!@Y- ÂKF?<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpcmdRemo**=I io&  bz!b@I- ÂKF=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**>I io&  bz!d@I- ÂKF>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**?I io&  bz_!e@I- ÂKF?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 1(Client not supported).o** @I io&  bzs!@I- ÂKF@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support)-Rd ** AI io&  bzs!@I- ÂKFAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support) **BI io&  bz/! B@I- ÂKFgBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >/RDP-Tcp#7**C io&  bz! !@- ÂKFgCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**D io&  bz+!@- ÂKF#DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpgrfxE*0 **E io&  bz+!@- ÂKF?EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpinpt**F io&  bz!@- ÂKF?FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`m7**G io&  bz!@- ÂKF(3GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**H D io&  bz!@ D- ÂKF(3HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &/**I D io&  bz!@ D- ÂKF(3IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**J&k io&  bz!@&k- ÂKFEJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**K8 io&  bz'!@8- ÂKFEKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \! rdpdr**L io&  bzA!@- ÂKFdLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCP19**MV io&  bzA!@V- ÂKFgMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCTcp#**NV io&  bz)!@V- ÂKFdNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpsnd**Od io&  bz!f@dp :i H"OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &.**Pd io&  bz!g@dp :i H"FPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**Q} io&  bz!g@}- ÂKFdQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x d**Rk߽ io&  bz!f@k߽- ÂKFRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**SH io&  bzI!@H gF|=SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49222atio**TH io&  bz'! A@H gF|=TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#8r**UH io&  bz! @H gF|= *UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ o**VةO io&  bz1!@ةO gF|=dVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational > 192.168.24.255vice**W io&  bzI!@ tG+kPWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49223>m**X io&  bz'! A@ tG+kPXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#9 **Y io&  bz! @ tG+kP\&YMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽  **Z io&  bz!f@ tG+kPZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **[ io&  bz!g@ tG+kP\&[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**\va io&  bzI!@va D&}F\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:492244923**]va io&  bz)! A@va D&}F]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#108r**^va io&  bz! @va D&}F^^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽  /**_BM io&  bz_!e@BM D&}Fe_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).**`BM io&  bz)!@BM D&}Fe`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdplic**aBM io&  bz)!@BM D&}FeaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpcmdb**b io&  bz!b@ D&}FbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**c io&  bz!d@ D&}FcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**d io&  bz_!e@ D&}FdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 1(Client not supported).** e io&  bzs!@ D&}FeMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support)Rdp ** f io&  bzs!@ D&}FfMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support)ft- **g io&  bz1! B@ D&}FpfgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >/RDP-Tcp#10ows-**ht io&  bz! !@t D&}FpfhMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &d**it io&  bz+!@t D&}FgiMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpgrfxkto**j֟ io&  bz+!@֟ D&}FejMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpinpt-Rd**k֟ io&  bz!@֟ D&}FekMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`m7e**lÌ io&  bz!@Ì D&}FpflMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &e**m6ʌ io&  bz!@6ʌ D&}FpfmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &d**nό io&  bz!@ό D&}Fx`nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &i**oJԌ io&  bz'!@JԌ D&}Fx`oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \! rdpdri**p֌ io&  bzA!@֌ D&}F$[pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCows-**q_ٌ io&  bzA!@_ٌ D&}FpfqMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!&AUDIO_PLAYBACK_DVCpSer**r_ٌ io&  bz)!@_ٌ D&}Fx`rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpsndvice**sdܫ io&  bz!g@dܫ D&}Fx`sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x o**t> io&  bz!f@> D&}FtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**up io&  bz!f@p gF|=uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s**vp io&  bz!g@p gF|= *vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x'**wQ1 io&  bzI!@Q1G J=swMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49226ows-**xQ1 io&  bz)! A@Q1G J=sxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#11Remo**yQ1 io&  bz! @Q1G J=sdyMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽  d**z#x1 io&  bz!f@#x1G J=szMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &i**{#x1 io&  bz!g@#x1G J=sd{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x9**|< 1 io&  bzI!@< 1Y% ȦATs|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.24.255:49227Wind**}< 1 io&  bz)! A@< 1Y% ȦATs}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#12ows-**~< 1 io&  bz! @< 1Y% ȦATs\~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽  -**(1 io&  bz_!e@(1Y% ȦATsNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).e**(1 io&  bz)!@(1Y% ȦATsNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdplics-Rd**(1 io&  bz)!@(1Y% ȦATsNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpcmdpCor**h1 io&  bz!b@h1Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &r**h1 io&  bz!d@h1Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &i**h1 io&  bz_!e@h1Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 1(Client not supported).o** h1 io&  bzs!@h1Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support)68. ** h1 io&  bzs!@h1Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*XTCP: Reason Code: 1 (No Client UDP Support) **h1 io&  bz1! B@h1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >/RDP-Tcp#12z**O 1 io&  bz! !@O 1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**O 1 io&  bz+!@O 1Y% ȦATsaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpgrfx**""1 io&  bz+!@""1Y% ȦATsNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \!rdpinpt**""1 io&  bz!@""1Y% ȦATsNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`m7**<1 io&  bz!@<1Y% ȦATsAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**2D1 io&  bz!@2D1Y% ȦATsAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**N:K1 io&  bz!@N:K1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &2oft-ndows-RemoteDesktopServices-RdpCoreTS/Operational ElfChnkzK;a=f?mMFl5h-["jUM**8[aR1 io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@[aR1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[\)UT4D EventDataA?oData= ChannelName A'=TunnelID  rdpdr8**T1 io&  bzA!@T1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC**&W1 io&  bzA!@&W1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC**&W1 io&  bz)!@&W1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpsndpCor**p-1 io&  bz! B@-1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#12Rdp**q1 io&  bz'!@q1Y% ȦATsAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdrd**ӥ1 io&  bzA!@ӥ1Y% ȦATsfMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC&**[61 io&  bzA!@[61Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC**[61 io&  bz)!@[61Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpsndpSer**1 io&  bzo!@1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01/**w]1 io&  bzY!@w]1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::Input****Ͽ1 io&  bzk!@Ͽ1Y% ȦATsAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControleas**1 io& bz+!@1Y% ȦATsAJ-N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdrtio**1 io&  bz9!@1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"&| p)cIQB'**\1 io&  bz!@\1Y% ȦATseMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"s**Z1 io&  bz!@Z1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"s**1 io&  bz!@1Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"s**7 io&  bz!f@7Y% ȦATsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"** p: io&  bzs!g@p:Y% ȦATs4QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+xXEMD8A+= ReasonCode o& **hb%' io&  bz!@b%'< nbA'=ConnType A'=ClientIP *TCP192.168.12.238:50684dx**85fc^ io&  bz! A@5fc^?D :N7O?xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjkPt3L4 JL@A3%=ConnectionName RDP-Tcp#0b8** ̪lc^ io&  bzs! @̪lc^?D :N7O?xXRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational l}r&TD8A+= InstanceID t-W **_|c^ io&  bz!f@_|c^?D :N7O?xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**c^ io&  bz!g@c^?D :N7O?xXRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+**Ee^ io&  bzI!@Ee^ <Jj{yxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h*TCP192.168.12.238:50782rt)**le^ io&  bz'! A@le^ <Jj{yxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjRDP-Tcp#1c**'e^ io&  bz! @'e^ <Jj{yxCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational l**e^ io&  bz!f@e^ <Jj{yxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**e^ io&  bz!g@e^ <Jj{yxCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+r**_!e^ io&  bzI!@_!e^ hyD>2xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h*TCP192.168.12.238:50785**!e^ io&  bz'! A@!e^ hyD>2xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjRDP-Tcp#2**ŭ!e^ io&  bz! @ŭ!e^ hyD>2xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational l**!#e^ io&  bz!f@!#e^ hyD>2xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**!#e^ io&  bz!g@!#e^ hyD>2xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+**T(e^ io&  bzI!@T(e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h*TCP192.168.12.238:50787**d)e^ io&  bz'! A@d)e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjRDP-Tcp#3**;)e^ io&  bz! @;)e^v ]pAXxQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational lC**hY"_e^ io&  bz!e@Y"_e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**Y"_e^ io&  bz)!@Y"_e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplic"**Y"_e^ io&  bz)!@Y"_e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmd**ke^ io&  bz!b@ke^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**ke^ io&  bz!d@ke^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**ke^ io&  bzo!@ke^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)}+&W)8:MG@4A'=TunnelID W**ke^ io&  bz!@ke^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)c**me^ io&  bz/! B@me^v ]pAXx|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#3o**_pe^ io&  bzM!@_pe^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h.UDP[192.168.12.238]:62001es**cpe^ io&  bz! !@cpe^v ]pAXx|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**cpe^ io&  bz+!@cpe^v ]pAXx7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfx**Fqe^ io&  bzM!@Fqe^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h.UDP[192.168.12.238]:62002es**te^ io&  bz+!@te^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinptRdp**`te^ io&  bz!@te^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r-rr˩-HbxlA'=TunnelID A1#= TransportType UDPD`**te^ io&  bzW!@te^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**Xte^ io&  bz!@te^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`&`J_Tpۉ%GrfA)= MajorType A)= MinorType _!X**te^ io&  bz#!@te^v ]pAXxQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDP**b{e^ io&  bza!@b{e^v ]pAXxQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetry)!**&{e^ io&  bz_!@&{e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphics**&{e^ io&  bz!@&{e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<57< KfȤA%=Version A+= ClientMode A-= H264Enabled -Rd**L|e^ io&  bz!@L|e^v ]pAXx=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"d**#e^ io&  bz#!@#e^OEyMz@ax Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPind**$e^ io&  bz]! @$e^v ]pAXx7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M5f=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY @**pte^ io&  bz! D@te^OEyMz@ax|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BUBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#33<}=iop**e^ io&  bz!@e^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"o**Tue^ io&  bz!@Tue^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"d** e^ io&  bz!@ e^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"e**e^ io&  bz!@e^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"-**;—e^ io&  bz'!@;—e^OEyMz@axQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdro**×e^ io&  bzA!@×e^OEyMz@ax|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCatio**V[Ɨe^ io&  bzM!@V[Ɨe^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVC**Ãe^ io&  bz/! B@Ãe^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#3**e^ io&  bz'!@e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr_**2e^ io&  bzA!@2e^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCpsnd**མe^ io&  bzM!@མe^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVC&**Re^ io&  bzo!@Re^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**Ęe^ io&  bz7! @Ęe^v ]pAXx0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M@**[̘e^ io&  bz!@[̘e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**ޘe^ io&  bzY!@ޘe^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::Input**!e^ io&  bzk!@!e^OEyMz@axMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControltop**e^ io&  bz+!@e^OEyMz@ax|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdrRdp**+e^ io&  bz!@+e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"p**-5+e^ io&  bz!@-5+e^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"s**3Te^ io&  bz!@3Te^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"o**aj^ io&  bz!@aj^v ]pAXxHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**!t^ io&  bz!f@!t^v ]pAXxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"**!t^ io&  bz!g@!t^v ]pAXx|OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+**hv io&  bz!!@hv7bXKŬdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-TCP= **hv io&  bz!!@hv7bXKŬdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-TCP= **'v io&  bz!!@'v7bXKŬdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-UDP=  **'v io&  bz!!@'v7bXKŬdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-UDP= _!**F8 } io&  bz!!@F8 }tbKDrv7<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-TCP= **F8 } io&  bz!!@F8 }tbKDrv7<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-TCP= uppo** F8 } io&  bz!!@F8 }tbKDrv7< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-UDP= X** F8 } io&  bz!!@F8 }tbKDrv7< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`-UDP= pSer** x|} io&  bzI!@x|}o E"+W"<d Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h*TCP192.168.16.250:53976pCor** x|} io&  bz'! A@x|}o E"+W"<` Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjRDP-Tcp#0o** (|} io&  bz! @(|}o E"+W"< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational lr**u} io&  bz!f@u}o E"+W"<\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &"o**u} io&  bz!g@u}o E"+W"<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}+e**} io&  bzI!@}ˈ y Be<dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5h*TCP192.168.16.250:53979atio**} io&  bz'! A@}ˈ y Be<`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtjRDP-Tcp#12oft-ndows-RemoteDesktopServices-RdpCoreTS/Operational ElfChnk8P2DKk,=f?mMF[=fV NeEY#}**Q} io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz! @Q}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [}r&TrfD EventDataA=oData= InstanceID **hz} io&  bz!e@z}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0 B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**`z} io&  bz!@z}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ \)UT4thA-= ChannelName A'=TunnelID rdplic`**z} io&  bz)!@z}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmd4Q**x?} io&  bz9!b@x?}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E&| p)c**x?} io&  bz!d@x?}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**x?} io&  bz_!e@x?}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0 LReason Code: 1(Client not supported).**x?} io&  bz!@x?}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r-rr˩-HbxlA'=TunnelID A1#= TransportType XTCP: Reason Code: 1 (No Client UDP Support)s-R** x?} io&  bzs!@x?}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rXTCP: Reason Code: 1 (No Client UDP Support)QB' **px?} io&  bz! B@x?}ˈ y Be< !Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#1-Rdp**ԡ} io&  bz! !@ԡ}ˈ y Be< !Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ei**ԡ} io&  bz+!@ԡ}ˈ y Be<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfxs-R**P"} io&  bz+!@P"}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinpts-R**XP"} io&  bz!@P"}ˈ y Be< Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`#&`J_Tpۉ%GrfA)= MajorType A)= MinorType ows-X** Xэ} io&  bz!@Xэ}ˈ y Be<  Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E-**! ۍ} io&  bz!@ ۍ}ˈ y Be< !!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E-**"3} io&  bz!@3}ˈ y Be< "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E-**#} io&  bz'!@}ˈ y Be< #Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdro**$Z} io&  bzA!@Z}ˈ y Be< !$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCcros**%I} io&  bzA!@I}ˈ y Be< !%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCMic**&I} io&  bz)!@I}ˈ y Be< !&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpsndroso**',} io&  bz/! B@,}ˈ y Be< 'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#1W**(8} io&  bz!@8}ˈ y Be< (Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**)-k:} io&  bz'!@-k:}ˈ y Be< )Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr***<} io&  bzA!@<}ˈ y Be<h*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCindo**+<} io&  bzA!@<}ˈ y Be<h+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCktop**,<} io&  bz)!@<}ˈ y Be<h,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpsndServ**-0?} io&  bz!@0?}ˈ y Be<-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Et**.CA} io&  bzo!@CA}ˈ y Be<.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01i**/C} io&  bzY!@C}ˈ y Be<h/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ >Microsoft::Windows::RDS::Inputskto**0 ~M} io&  bzk!@ ~M}ˈ y Be<0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ PMicrosoft::Windows::RDS::DisplayControlr`-**1O} io& bz+!@O}ˈ y Be<h1J-N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ cliprdr= **23 W} io&  bz!@3 W}ˈ y Be<2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**3iY} io&  bz!@iY}ˈ y Be< 3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Er**4>} io&  bz!f@>}ˈ y Be<\4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ed** 5 JA} io&  bzs!g@ JA}ˈ y Be< 5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xLxXEMD8A+= ReasonCode ice **h6i= io&  bz!@i=p}bVM/o-D6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`Nr`]/iL6tAA3=TransportProtocolName A=Port TCP= ;\@Dh**7i= io&  bz!!@i=p}bVM/o-D7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`NTCP= 4O**8i= io&  bz!!@i=p}bVM/o-D8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`NUDP= 4O**9i= io&  bz!!@i=p}bVM/o-D9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`NUDP= 4O**p:ٷ io&  bz!@ٷ3 @H&cu:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭVMDٽi&6h}> nbA'=ConnType A'=ClientIP  TCP127.0.0.1:57028osp**8; 'ٷ io&  bz! A@ 'ٷ3 @H&cu;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtYkPt3L4 JL@A3%=ConnectionName RDP-Tcp#0tio8**<ٷ io&  bz! @ٷ3 @H&cu+<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [/**=5+ٷ io&  bz_!e@5+ٷ3 @H&cux=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0 LReason Code: 2(Server Configuration).**>5+ٷ io&  bz)!@5+ٷ3 @H&cux>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdplicpSer**?5+ٷ io&  bz)!@5+ٷ3 @H&cux?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmd****@&\2ٷ io&  bz!b@&\2ٷ3 @H&cu@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &EC**A&\2ٷ io&  bz!d@&\2ٷ3 @H&cuAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E **B&\2ٷ io&  bzo!@&\2ٷ3 @H&cuBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=fL&W)8:MG@4A'=TunnelID **C&\2ٷ io&  bz!@&\2ٷ3 @H&cuCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=f**D4ٷ io&  bz/! B@4ٷ3 @H&cu)DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#0-**E4ٷ io&  bz! !@4ٷ3 @H&cu)EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ec**F4ٷ io&  bz+!@4ٷ3 @H&cu$&FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfx!**Gb bٷ io&  bz+!@b bٷ3 @H&cuxGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinpt:N**Hb bٷ io&  bzW!@b bٷ3 @H&cuxHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)o**Ib bٷ io&  bzW!@b bٷ3 @H&cuxIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)R**Jb bٷ io&  bz!@b bٷ3 @H&cuxJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`#o**Kٷ io&  bza!@ٷ3 @H&cuKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::TelemetryIQB'**Lٷ io&  bz_!@ٷ3 @H&cuLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphicse**Mٷ io&  bz!@ٷ3 @H&cuMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<5{7< KfȤA%=Version A+= ClientMode A-= H264Enabled **Nyٷ io&  bz!@yٷ3 @H&cu($NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**Ox1ٷ io&  bz]! @x1ٷ3 @H&cu$&OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }5{f=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY 8Rd**Pd=ٷ io&  bz!@d=ٷ3 @H&cu)PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ed**QDٷ io&  bz!@Dٷ3 @H&cu)QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ee**RKٷ io&  bz!@Kٷ3 @H&cu)RMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Es**Seٷ io&  bz'!@eٷ3 @H&cuSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdrs**Ttqٷ io&  bzA!@tqٷ3 @H&cu,TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCskto**Uٷ io&  bzM!@ٷ3 @H&cup)UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVCop**Vœٷ io&  bz/! B@œٷ3 @H&cuVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#0p**WnLٷ io&  bz'!@nLٷ3 @H&cu,WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdrs**X"ٷ io&  bz!@"ٷ3 @H&cu)XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Es**Yٷ io&  bz!@ٷ3 @H&cuYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Es**Zٷ io&  bz!@ٷ3 @H&cuZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Eʸ**[ٷ io&  bz!@ٷ3 @H&cu[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**\Iٷ io&  bzA!@Iٷ3 @H&cu\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVC@ax**]Iٷ io&  bzo!@Iٷ3 @H&cu]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01c**p^ٷ io&  bz! D@ٷ3 @H&cu^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#0 Mxp**_ٷ io&  bzM!@ٷ3 @H&cu_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVCx**`ٷ io&  bz7! @ٷ3 @H&cu$'`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }8**aٷ io&  bzY!@ٷ3 @H&cuaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ >Microsoft::Windows::RDS::Input**bQ[ٷ io&  bzk!@Q[ٷ3 @H&cubMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ PMicrosoft::Windows::RDS::DisplayControlb**c 'ٷ io&  bz+!@ 'ٷ3 @H&cucMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ cliprdr** d$ٷ io&  bzw!@$ٷ3 @H&cudMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received) ** e$ٷ io&  bzw!@$ٷ3 @H&cueMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received) **f'ڷ io&  bz!f@'ڷ3 @H&cufMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**ggg'ڷ io&  bz!g@gg'ڷ3 @H&cugMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xL**h&u- io&  bz?!@&u- Ks\hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭV TCP127.0.0.1:62679p**i&u- io&  bz'! A@&u- Ks\iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtYRDP-Tcp#1'**j&u- io&  bz! @&u- Ks\jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [e**(k­- io&  bz!@­- Ks\,kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >e >X{3EP,{@4A'=IPString 127.0.0.1(**lu3 io&  bz?!@u3>u nAݵllMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭV TCP127.0.0.1:62680**mu3 io&  bz'! A@u3>u nAݵlmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtYRDP-Tcp#2**nu3 io&  bz! @u3>u nAݵl2nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [u**oQ4 io&  bz_!e@Q4>u nAݵl2oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0 LReason Code: 2(Server Configuration).o**pQ4 io&  bz)!@Q4>u nAݵl2pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdplicktop**qQ4 io&  bz)!@Q4>u nAݵl2qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmdCore**ryV4 io&  bz!b@yV4>u nAݵlrMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ev**syV4 io&  bz!d@yV4>u nAݵlsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Eo**tyV4 io&  bz!@yV4>u nAݵltMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=f**uyV4 io&  bz!@yV4>u nAݵluMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=f**vyV4 io&  bz/! B@yV4>u nAݵl, vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#2**wX4 io&  bz! !@X4>u nAݵl, wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**xX4 io&  bz+!@X4>u nAݵlxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfxo&**yiƃ4 io&  bz+!@iƃ4>u nAݵl2yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinptry:**ziƃ4 io&  bzW!@iƃ4>u nAݵl2zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**{iƃ4 io&  bzW!@iƃ4>u nAݵl2{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**|iƃ4 io&  bz!@iƃ4>u nAݵl2|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`#**} -5 io&  bza!@ -5>u nAݵlh2}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::Telemetry****~ -5 io&  bz_!@ -5>u nAݵlh2~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphics** -5 io&  bz'!@ -5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<5{**^p/5 io&  bz!@^p/5>u nAݵl,'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**$\;5 io&  bz7! @$\;5>u nAݵlh+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }8**GG5 io&  bz!@GG5>u nAݵl, Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**QI5 io&  bzG! D@QI5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BRDP-Tcp#2)2T3**oN5 io&  bz!@oN5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**3S5 io&  bz!@3S5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E7**W5 io&  bz!@W5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**+v5 io&  bz'!@+v5>u nAݵl,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr**5 io&  bzA!@5>u nAݵl, Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCKDr**5 io&  bz/! B@5>u nAݵlh2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#2**ͭ5 io&  bz'!@ͭ5>u nAݵl,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr**/5 io&  bz7! @/5>u nAݵl(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }8**\5 io&  bz!@\5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &E**\5 io&  bzY!@\5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ >Microsoft::Windows::RDS::Input` **\5 io&  bzA!@\5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCroso**\5 io&  bzo!@\5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.019**i5 io&  bz+!@i5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ cliprdrft-**5 io&  bzM!@5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVCce**5 io&  bzo!@5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01rional kPtj io&  bzServices-RdpCoreTS/Operational ElfChnkUY =f?mMF)5] [eJ59C **i5 io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bzU!@i5>u nAݵl, Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[&| p)c."D EventData**5 io&  bz !@5>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] \)UT4zA? oData= ChannelName A' =TunnelID PMicrosoft::Windows::RDS::DisplayControl****9 io&  bz!@9>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r -rr˩-HbxlA' =TunnelID A1 #= TransportType \TCP: Reason Code: 3 (No UDP Packets Received)** 9 io&  bzw!@9>u nAݵl,(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received) **&c io&  bz!f@&c Ks\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[** &c io&  bzs!g@&c Ks\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+ = ReasonCode ndo **$ io&  bz!f@$>u nAݵlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[?**N io&  bz!g@N>u nAݵlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**pS`* io&  bz!@S`* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5MDٽi&6h}> nbA' =ConnType A' =ClientIP  TCP127.0.0.1:51861 Sp**8S`* io&  bz! A@S`* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtkPt3L4 JL@A3 %=ConnectionName RDP-Tcp#38** S`* io&  bzs! @S`* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }r&TD8A+ = InstanceID ԡ **hN_* io&  bz!e@N_* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0B)0ʽ "=`H<A/ != ReasonString LReason Code: 2(Server Configuration).h**N_* io&  bz)!@N_* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdplic **N_* io&  bz)!@N_* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpcmdio&**[d* io&  bz!b@[d* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**[d* io&  bz!d@[d* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**[d* io&  bzo!@[d* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))&W)8:MG@4A' =TunnelID **[d* io&  bz!@[d* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))**pi* io&  bz! B@i* N0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >]-&>%o?|pA3 %=ConnectionName A) = SessionID RDP-Tcp#3topp**i* io&  bz! !@i* N0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[c**i* io&  bz+!@i* NpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpgrfxMic**T1* io&  bz+!@T1* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpinptMic**T1* io&  bzW!@T1* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)s**T1* io&  bzW!@T1* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)s**XT1* io&  bz!@T1* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`59]-&`J_Tpۉ%GrfA) = MajorType A) = MinorType atioX**# * io&  bza!@# * N\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] FMicrosoft::Windows::RDS::Telemetryrd**# * io&  bz_!@# * N\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] DMicrosoft::Windows::RDS::Graphics**# * io&  bz!@# * N\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7]-RDP-Tcp#3**9 * io&  bz'!@9 * N0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdr** * io&  bz7! @ * N@'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational C8n**% * io&  bzA!@% * N(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVCnal **% * io&  bzY!@% * N(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::Inputvice**L * io&  bzo!@L * NdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01:**s * io&  bz+!@s * N(0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] cliprdrtio**s * io&  bzM!@s * N(0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVCrd**s * io&  bzo!@s * N(0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01**s * io&  bz!@s * N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[** * io&  bzk!@ * N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] PMicrosoft::Windows::RDS::DisplayControl**  * io&  bzw!@ * N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received) **  * io&  bzw!@ * N*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received)s **p* io&  bz!f@p* NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s**d5* io&  bz!g@d5* N0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xo**w·U io&  bz?!@w·U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5 TCP127.0.0.1:63089t**0U io&  bz'! A@0U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#4**0U io&  bz! @0U 0J ^M@h*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational **#U io&  bz_!e@#U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).**#U io&  bz)!@#U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdplic**#U io&  bz)!@#U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpcmd**fU io&  bz!b@fU 0J ^M@$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**fU io&  bz!d@fU 0J ^M@$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[i**fU io&  bz!@fU 0J ^M@$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))s**fU io&  bz!@fU 0J ^M@$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))8**yU io&  bz/! B@yU 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >]-RDP-Tcp#4**U io&  bz! !@U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**U io&  bz+!@U 0J ^M@$'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpgrfx**ZQ,U io&  bz+!@ZQ,U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpinpt**ZQ,U io&  bzW!@ZQ,U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**ZQ,U io&  bzW!@ZQ,U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**ZQ,U io&  bz!@ZQ,U 0J ^M@ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`59**U io&  bza!@U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] FMicrosoft::Windows::RDS::Telemetry**U io&  bz_!@U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] DMicrosoft::Windows::RDS::GraphicsW**U io&  bz'!@U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7]-RDP-Tcp#4**iU io&  bz'!@iU 0J ^M@HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdr**U io&  bz7! @U 0J ^M@(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational C8**U io&  bzY!@U 0J ^M@+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::Inputets **U io&  bzA!@U 0J ^M@+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVC**UU io&  bzo!@UU 0J ^M@+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01**UU io&  bz+!@UU 0J ^M@+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] cliprdrb**U io&  bz!@U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**[U io&  bzM!@[U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVC@**[U io&  bzo!@[U 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01**yTU io&  bzk!@yTU 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] PMicrosoft::Windows::RDS::DisplayControlm** | U io&  bzw!@| U 0J ^M@HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received)p ** | U io&  bzw!@| U 0J ^M@HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received)o **3 ] io&  bz!f@3 ] 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s**5] io&  bz!g@5] 0J ^M@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xs**__u+ io&  bz?!@__u+T @Z,#:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD5 TCP127.0.0.1:50622v**-v+ io&  bz'! A@-v+T @Z,#:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#5e**{v+ io&  bz! @{v+T @Z,#:/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 9**I+ io&  bz_!e@I+T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).o**I+ io&  bz)!@I+T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdplics-Rd**I+ io&  bz)!@I+T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpcmds-Rd**+ io&  bz!b@+T @Z,#:TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[d**+ io&  bz!d@+T @Z,#:TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[e**+ io&  bz!@+T @Z,#:TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))d**+ io&  bz!@+T @Z,#:TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))s**p , io&  bz/! B@p ,T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >]-RDP-Tcp#5R** , io&  bz! !@ ,T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[W** E , io&  bz+!@ E ,T @Z,#:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpgrfxnA**7!, io&  bz+!@7!,T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpinptb**7!, io&  bzW!@7!,T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**7!, io&  bzW!@7!,T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)R**7!, io&  bz!@7!,T @Z,#:#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`59o**, io&  bza!@,T @Z,#:43Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] FMicrosoft::Windows::RDS::TelemetryTS9**1ӭ, io&  bz_!@1ӭ,T @Z,#:43Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] DMicrosoft::Windows::RDS::Graphicss**1ӭ, io&  bz'!@1ӭ,T @Z,#:43Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7]-RDP-Tcp#5o**- io&  bz'!@-T @Z,#:43Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdrc**D^- io&  bz7! @D^-T @Z,#:&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational C8**'- io&  bzY!@'-T @Z,#:<*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputeTS/erational ElfChnkf=f?mMFU$/u&["%O?eJ**X'- io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@'-T @Z,#:<*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[\)UT4D EventDataA?oData= ChannelName A'=TunnelID &AUDIO_PLAYBACK_DVC,(X**'- io&  bzo!@'-T @Z,#:<*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**'- io&  bz+!@'-T @Z,#:<*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdr'**~- io&  bzM!@~-T @Z,#:43Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVC'**>- io&  bzo!@>-T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.019**n- io&  bz9!@n-T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&| p)cows-**o- io&  bzk!@o-T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControlind**0 io&  bz!@0T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r-rr˩-HbxlA'=TunnelID A1#= TransportType \TCP: Reason Code: 3 (No UDP Packets Received)** 0 io&  bzw!@0T @Z,#:%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received) **ɷ io&  bz!f@ɷT @Z,#:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &** 7(ɷ io&  bzs!g@7(ɷT @Z,#:|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+= ReasonCode  **p$ io&  bz!@$ >(@k$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭMDٽi&6h}> nbA'=ConnType A'=ClientIP  TCP127.0.0.1:56455asp**8 k io&  bz! A@k >(@k$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt"kPt3L4 JL@A3%=ConnectionName RDP-Tcp#6N_8** !k io&  bzs! @k >(@k$!!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational U$}r&TD8A+= InstanceID  **h"{ io&  bz!e@{ >(@k$'"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0u&B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).ph**#{ io&  bz)!@{ >(@k$'#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplic Mi**${ io&  bz)!@{ >(@k$'$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmdeDes**%5! io&  bz!b@5! >(@k$\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &t**&5! io&  bz!d@5! >(@k$\&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**'5! io&  bzo!@5! >(@k$\'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/&W)8:MG@4A'=TunnelID **(5! io&  bz!@5! >(@k$\(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/**p)5! io&  bz! B@5! >(@k$.)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#6Rdpp*** $ io&  bz! !@ $ >(@k$.*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**+ $ io&  bz+!@ $ >(@k$(+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfx**,L io&  bz+!@L >(@k$',Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinpt**-L io&  bzW!@L >(@k$'-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**.L io&  bzW!@L >(@k$'.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**X/L io&  bz!@L >(@k$'/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`?3&`J_Tpۉ%GrfA)= MajorType A)= MinorType nablX**0ܷ io&  bza!@ܷ >(@k$h0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetryio&**1ܷ io&  bz_!@ܷ >(@k$h1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphicsr**2ܷ io&  bz!@ܷ >(@k$h2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<F7< KfȤA%=Version A+= ClientMode A-= H264Enabled 9**3C? io&  bz!@C? >(@k$,'3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &9**4+Ƶ io&  bz]! @+Ƶ >(@k$)4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJFf=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY 8tG**56yԵ io&  bz!@6yԵ >(@k$h5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**p6ֵ io&  bz! D@ֵ >(@k$h6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B%OBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#6-osp**7Q۵ io&  bz!@Q۵ >(@k$h7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &v**8e io&  bz!@e >(@k$\8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &R**9V io&  bz'!@V >(@k$.9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdrR**: io&  bzA!@ >(@k$:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCeDes**; io&  bz/! B@ >(@k$.;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3RDP-Tcp#6o**<Gu1 io&  bz'!@Gu1 >(@k$h<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr**=,:6 io&  bz7! @,:6 >(@k$)=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJ8**>%B io&  bzA!@%B >(@k$\>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC**?%B io&  bzY!@%B >(@k$\?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::Input ***@%B io&  bzo!@%B >(@k$\@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**ALI io&  bz+!@LI >(@k$\AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdr**BWK io&  bz!@WK >(@k$BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**CN io&  bzM!@N >(@k$CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVC&**D8U io&  bzo!@8U >(@k$DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**E7e io&  bzk!@7e >(@k$EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControl** F io&  bzw!@ >(@k$FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received)R ** G io&  bzw!@ >(@k$GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received)e **HԤ ! io&  bz!f@Ԥ ! >(@k$HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &v**I" ! io&  bz!g@" ! >(@k$`IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xv**JS}K io&  bz?!@S}Ko OH2JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:60228R**KS}K io&  bz'! A@S}Ko OH2KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt"RDP-Tcp#7o**LS}K io&  bz! @S}Ko OH21LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational U$c**M=s~N io&  bz_!e@=s~No OH2T3MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0u&LReason Code: 2(Server Configuration).p**N=s~N io&  bz)!@=s~No OH2T3NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplic Mi**O=s~N io&  bz)!@=s~No OH2T3OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmdWind**P7N io&  bz!b@7No OH2dPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**Q7N io&  bz!d@7No OH2dQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &9**R7N io&  bz!@7No OH2dRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/'**S7N io&  bz!@7No OH2dSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/p**T7N io&  bz/! B@7No OH2T(TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3RDP-Tcp#7p**UON io&  bz! !@ONo OH2T(UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**VON io&  bz+!@ONo OH2 VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfx@**W$N io&  bz+!@$No OH2T3WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinpt**X$N io&  bzW!@$No OH2T3XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**Y$N io&  bzW!@$No OH2T3YMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**Z$N io&  bz!@$No OH2T3ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`?**[ZYO io&  bza!@ZYOo OH2$[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetryemot**\hO io&  bz_!@hOo OH2$\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphicsp**]hO io&  bz'!@hOo OH2$]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<F'**^|jO io&  bz!@|jOo OH2<+^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &'**_hvO io&  bz7! @hvOo OH2+_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJ8-**`TO io&  bz!@TOo OH2$`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s**a=O io&  bzG! D@=Oo OH2$aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B%ORDP-Tcp#7m+5s**b{O io&  bz!@{Oo OH2$bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &v**cO@O io&  bz!@O@Oo OH2T(cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &c**dܪO io&  bz'!@ܪOo OH2,dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr**efO io&  bzA!@fOo OH2P,eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCindo**fO io&  bz/! B@Oo OH2,fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3RDP-Tcp#7W**gPO io&  bz7! @POo OH2($gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJ8**hPO io&  bz'!@POo OH2,hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdrU**iO io&  bzY!@Oo OH2T(iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::Input+!**jO io&  bzA!@Oo OH2T(jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCU**kO io&  bzo!@Oo OH2kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01s**lO io&  bzM!@Oo OH2,lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVCes**mO io&  bzo!@Oo OH2,mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01s**nO io&  bz+!@Oo OH2$nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdr**oP io&  bz!@Po OH2$oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**pP io&  bzk!@Po OH2T(pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControl** qIS io&  bzw!@ISo OH2$qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received) ** rIS io&  bzw!@ISo OH2$rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r\TCP: Reason Code: 3 (No UDP Packets Received)s **s]5R io&  bz!f@]5Ro OH2sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**t":R io&  bz!g@":Ro OH2,tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xo**uΛ io&  bz?!@Λ /M?uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:61389s**vΛ io&  bz'! A@Λ /M?vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt"RDP-Tcp#8**wΛ io&  bz! @Λ /M?"wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational U$**xћ io&  bz_!e@ћ /M?T1xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0u&LReason Code: 2(Server Configuration).W**yћ io&  bz)!@ћ /M?T1yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpliceDes**zћ io&  bz)!@ћ /M?T1zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmd-Rdp**{ãћ io&  bz!b@ãћ /M?`{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s**|ãћ io&  bz!d@ãћ /M?`|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &v**}ãћ io&  bz!@ãћ /M?`}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/t**~ãћ io&  bz!@ãћ /M?`~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)/s**ãћ io&  bz/! B@ãћ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3RDP-Tcp#8s**&ћ io&  bz! !@&ћ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W**&ћ io&  bz+!@&ћ /M?)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfx#**ћ io&  bz+!@ћ /M?T1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinpt**ћ io&  bzW!@ћ /M?T1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**ћ io&  bzW!@ћ /M?T1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**ћ io&  bz!@ћ /M?T1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`?**wқ io&  bza!@wқ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetry+**қ io&  bz_!@қ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphicsp**қ io&  bz'!@қ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<Ft**Cқ io&  bz!@Cқ /M?)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &t**/қ io&  bz7! @/қ /M?0)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJ8o**қ io&  bz!@қ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**Bқ io&  bz!@Bқ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**[қ io&  bz!@[қ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**[қ io&  bzG! D@[қ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B%ORDP-Tcp#8} p**қ io&  bz'!@қ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdro**-қ io&  bzA!@-қ /M?|.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCft-W**pқ io&  bz/! B@pқ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >3RDP-Tcp#8W**yқ io&  bz'!@yқ /M?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdrW**ӛ io&  bz7! @ӛ /M?$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational eJ8Wdows-RemoteD io&  bzindows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputeTS/erational ElfChnkA!=f?mMF]&2!}([%$ZAmL **p* ӛ io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@* ӛ /M?|.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[\)UT4D EventDataA?oData= ChannelName A'=TunnelID >Microsoft::Windows::RDS::Input'-p**Ќӛ io&  bzA!@Ќӛ /M?|.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC:v08**Ќӛ io&  bzo!@Ќӛ /M?|.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**Ќӛ io&  bz+!@Ќӛ /M?|.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdr**Mӛ io&  bz9!@Mӛ /M?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&| p)ceome**xӛ io&  bzo!@xӛ /M?-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01***ӛ io&  bzM!@*ӛ /M?-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVCro**/ӛ io&  bzk!@/ӛ /M?-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControlA**3֛ io&  bz!@3֛ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r -rr˩-HbxlA'=TunnelID A1#= TransportType \TCP: Reason Code: 3 (No UDP Packets Received) ** 3֛ io&  bzw!@3֛ /M?h(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received) **0o io&  bz!f@0o /M?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &** ao io&  bzs!g@ao /M?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+= ReasonCode A **p io&  bz!@ JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ!MDٽi&6h}> nbA'=ConnType A'=ClientIP  TCP127.0.0.1:54979Nap**8 io&  bz! A@ JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt%$kPt3L4 JL@A3%=ConnectionName RDP-Tcp#9D 8** # io&  bzs! @# JWzd*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ]&}r&TD8A+= InstanceID  ing **h:A io&  bz!e@:A JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0}(B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**:A io&  bz)!@:A JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplic**:A io&  bz)!@:A JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmd**E io&  bz!b@E JWz Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**E io&  bz!d@E JWz Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**E io&  bzo!@E JWz Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2&W)8:MG@4A'=TunnelID **E io&  bz!@E JWz Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2a**pZ io&  bz! B@Z JWz<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >5&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#9p**[ io&  bz! !@[ JWz<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**[ io&  bz+!@[ JWz($Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfx**s io&  bz+!@s JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinpt****#s io&  bzW!@#s JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**#s io&  bzW!@#s JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**X#s io&  bz!@#s JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`A5&`J_Tpۉ%GrfA)= MajorType A)= MinorType X**k io&  bza!@k JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetryr**; io&  bz_!@; JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphics**; io&  bz!@; JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<%H7< KfȤA%=Version A+= ClientMode A-= H264Enabled **Q> io&  bz!@Q> JWz(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**0T io&  bz]! @0T JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational mL%Hf=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY 8**Y1s io&  bz!@Y1s JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &a**8{ io&  bz!@8{ JWz<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &** io&  bz!@ JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**V io&  bz!@V JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &** io&  bz'!@ JWz<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr**8& io&  bzA!@8& JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC**p8& io&  bz! D@8& JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BZBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#9n w:6p** io&  bz/! B@ JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >5RDP-Tcp#9**R io&  bz'!@R JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdrC**f" io&  bz7! @f" JWz0)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational mL8:**q2 io&  bzY!@q2 JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::Inputoft:**q2 io&  bzA!@q2 JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCnal **q2 io&  bzo!@q2 JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01**f: io&  bz+!@f: JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdrD**Xx? io&  bzM!@Xx? JWz<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVC08***E io&  bz!@*E JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **F io&  bzo!@F JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01 **GY io&  bzk!@GY JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControltio** X io&  bzw!@X JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received)o ** X io&  bzw!@X JWz)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received) **e> io&  bz!f@e> JWzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &K**d*> io&  bz!g@d*> JWzP.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**̯A io&  bz?!@̯Az I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ! TCP127.0.0.1:55352**].A io&  bz)! A@].Az I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt%$RDP-Tcp#10.p**].A io&  bz! @].Az I9J4D3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ]& d**C io&  bz_!e@Cz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0}(LReason Code: 2(Server Configuration).N**C io&  bz)!@Cz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplic**C io&  bz)!@Cz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmd**]C io&  bz!b@]Cz I9J48Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**]C io&  bz!d@]Cz I9J48Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**]C io&  bz!@]Cz I9J48Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2**]C io&  bz!@]Cz I9J48Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2**=C io&  bz1! B@=Cz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >5RDP-Tcp#10**!C io&  bz! !@!Cz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**!C io&  bz+!@!Cz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfxown**-(D io&  bz+!@-(Dz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinptRea**-(D io&  bzW!@-(Dz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**-(D io&  bzW!@-(Dz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)**-(D io&  bz!@-(Dz I9J4)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`Ai**D io&  bza!@Dz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetry**03D io&  bz_!@03Dz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphics**03D io&  bz'!@03Dz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<%H**D io&  bz!@Dz I9J4T&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**]D io&  bz7! @]Dz I9J4,'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational mL8**7mD io&  bz!@7mDz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**?E io&  bz!@?Ez I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**E io&  bzI! D@Ez I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BZRDP-Tcp#10} c(**YE io&  bz!@YEz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &O** E io&  bz!@ Ez I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**W$E io&  bz'!@W$Ez I9J4 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr**qC0E io&  bzA!@qC0Ez I9J4d0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVC****@E io&  bz1! B@@Ez I9J4 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >5RDP-Tcp#10::RD**-[E io&  bz'!@-[Ez I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[ rdpdr**_E io&  bz7! @_Ez I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational mL8o**%|iE io&  bzY!@%|iEz I9J4d0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[>Microsoft::Windows::RDS::InputeTS/**%|iE io&  bzA!@%|iEz I9J4d0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[&AUDIO_PLAYBACK_DVCpCor**@nE io&  bzo!@@nEz I9J4d0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01r**@nE io&  bz+!@@nEz I9J4d0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[cliprdrCor**ewE io&  bz!@ewEz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &r**,zE io&  bzM!@,zEz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[2AUDIO_PLAYBACK_LOSSY_DVCto**,zE io&  bzo!@,zEz I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[TMicrosoft::Windows::RDS::Geometry::v08.01e**E io&  bzk!@Ez I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[PMicrosoft::Windows::RDS::DisplayControlemo** C J io&  bzw!@C Jz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received)o ** C J io&  bzw!@C Jz I9J4X0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r \TCP: Reason Code: 3 (No UDP Packets Received) **@ io&  bz?!@@G cOu HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ! TCP127.0.0.1:55709**h io&  bz)! A@hG cOu HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt%$RDP-Tcp#11b**> io&  bz! @>G cOu HH/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ]& ** io&  bz!f@z I9J4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s** io&  bz!g@z I9J4 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xd**2ʼn io&  bz!f@2ʼnG cOu HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &o**2ʼn io&  bz!g@2ʼnG cOu HH/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x **n  io&  bz?!@n  FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ! TCP127.0.0.1:55772**  io&  bz)! A@  FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt%$RDP-Tcp#12**  io&  bz! @  F/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ]& **c io&  bz_!e@c FdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0}(LReason Code: 2(Server Configuration).**c io&  bz)!@c FdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdplicb**c io&  bz)!@c FdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpcmdb**FD io&  bz!b@FD F`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**FD io&  bz!d@FD F`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **FD io&  bz!@FD F`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2r**FD io&  bz!@FD F`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)2/**1 io&  bz1! B@1 FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >5RDP-Tcp#12teDe** io&  bz! !@ FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &p**  io&  bz+!@ F$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpgrfxore** < io&  bz+!@< Fd Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[rdpinptros** < io&  bzW!@< Fd Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)o** < io&  bzW!@< Fd Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r <TCP: Reason Code: 5 (Unknown)o** < io&  bz!@< Fd Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`A** io&  bza!@ F Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[FMicrosoft::Windows::RDS::Telemetry**C io&  bz_!@C FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \[DMicrosoft::Windows::RDS::Graphics**C io&  bz'!@C F Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<%H**ɂ io&  bz!@ɂ F($Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**w io&  bz7! @w F&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational mL8**_ io&  bz!@_ FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Wdows-Rem io&  bzzindows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputeTS/erational ElfChnkh)Ү]H =f?mMFM8C3m:[6 SY***$[ io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bzU!@$[ FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[&| p)c."D EventData** io&  bz!@ FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[p**kU io&  bz! D@kU F Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B Ba$xlAEH oData%=ConnectionName A?H 1=PromptForCredentials AGH 9=PromptForCredentialsDone A7H )=GfxChannelOpened AAH 3=FirstGraphicsReceived RDP-Tcp#12fz{+!**` io&  bz!@ F Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \\)UT4thA-H = ChannelName A'H =TunnelID  rdpdrerv`** io&  bzA!@ F Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&AUDIO_PLAYBACK_DVCices**pO io&  bz! B@O F -Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >&>%o?|pA3H %=ConnectionName A)H = SessionID RDP-Tcp#12Dep**.< io&  bz'!@.< FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpdrs**= io&  bz]! @= F0)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -f=JCA+H = MonitorNum A/H != MonitorWidth A1H #= MonitorHeight A'H =MonitorX A'H =MonitorY 8ns**O io&  bzY!@O F,*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \>Microsoft::Windows::RDS::Inputs-Rd**LS io&  bzo!@LS F,*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \TMicrosoft::Windows::RDS::Geometry::v08.01e**4HT io&  bzA!@4HT F,*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&AUDIO_PLAYBACK_DVCx**>U io&  bz+!@>U FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \cliprdrkto** a io&  bz!@a F  Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**!?f io&  bzo!@?f F!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \TMicrosoft::Windows::RDS::Geometry::v08.01 **"n io&  bzM!@n F "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \2AUDIO_PLAYBACK_LOSSY_DVCb**#ه io&  bzk!@ه F,*#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \PMicrosoft::Windows::RDS::DisplayControl:A**$3  io&  bz!@3  F -$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*-rr˩-HbxlA'H =TunnelID A1H #= TransportType \TCP: Reason Code: 3 (No UDP Packets Received)s** %3  io&  bzw!@3  F -%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*\TCP: Reason Code: 3 (No UDP Packets Received)s **&SH io&  bz!f@SH F&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s** 'u io&  bzs!g@u F -'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1xXEMD8A+H = ReasonCode tio **p( io&  bz!@ ԗOK:ꎬ(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3MDٽi&6h}> nbA'H =ConnType A'H =ClientIP  TCP127.0.0.1:64119p**8)@ io&  bz! A@@ ԗOK:ꎬ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6kPt3L4 JL@A3H %=ConnectionName RDP-Tcp#138** * io&  bzs! @ ԗOK:ꎬ*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8}r&TD8A+H = InstanceID  b **h+I  io&  bz!e@I  ԗOK:ꎬ+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0m:B)0ʽ "=`H<A/H != ReasonString LReason Code: 2(Server Configuration).ph**,I  io&  bz)!@I  ԗOK:ꎬ,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \rdplicktop**-I  io&  bz)!@I  ԗOK:ꎬ-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \rdpcmdft-W**.P io&  bz!b@P ԗOK:ꎬ.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[ɸ**/P io&  bz!d@P ԗOK:ꎬ/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**0P io&  bzo!@P ԗOK:ꎬ0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)C1&W)8:MG@4A'H =TunnelID y**1P io&  bz!@P ԗOK:ꎬ1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)C**24 io&  bz1! B@4 ԗOK:ꎬ2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#13pCor**3[, io&  bz! !@[, ԗOK:ꎬ3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**4[, io&  bz+!@[, ԗOK:ꎬh+4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \rdpgrfxt-W**5ܚD io&  bz+!@ܚD ԗOK:ꎬ5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \rdpinptA**6ܚD io&  bzW!@ܚD ԗOK:ꎬ6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*<TCP: Reason Code: 5 (Unknown)o**7ܚD io&  bzW!@ܚD ԗOK:ꎬ7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*<TCP: Reason Code: 5 (Unknown)**X8ܚD io&  bz!@ܚD ԗOK:ꎬ8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`S&`J_Tpۉ%GrfA)H = MajorType A)H = MinorType ft-WX**9˝ io&  bza!@˝ ԗOK:ꎬ\9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \FMicrosoft::Windows::RDS::TelemetryIQB'**:˝ io&  bz_!@˝ ԗOK:ꎬ\:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \DMicrosoft::Windows::RDS::Graphicse**; io&  bz!@ ԗOK:ꎬh/;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7  io&  bz!@  ԗOK:ꎬ>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**? io&  bz!@ ԗOK:ꎬ?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**@{ io&  bz!@{ ԗOK:ꎬ@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s**A io&  bzI! D@ ԗOK:ꎬAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B RDP-Tcp#13m%!"&**Bl# io&  bz!@l# ԗOK:ꎬ\BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[d**CV io&  bz'!@V ԗOK:ꎬ\CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpdrs**Dkg io&  bzA!@kg ԗOK:ꎬDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&AUDIO_PLAYBACK_DVCows-**Erq io&  bz1! B@rq ԗOK:ꎬEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#13cros**Fn io&  bz'!@n ԗOK:ꎬh/FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpdr-**G io&  bz7! @ ԗOK:ꎬ)GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -8e**H io&  bzA!@ ԗOK:ꎬHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&AUDIO_PLAYBACK_DVCeDes**I io&  bzY!@ ԗOK:ꎬIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \>Microsoft::Windows::RDS::Inputindo**J io&  bzo!@ ԗOK:ꎬJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \TMicrosoft::Windows::RDS::Geometry::v08.01W**K(d io&  bz+!@(d ԗOK:ꎬKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \cliprdrDes**LJ) io&  bz!@J) ԗOK:ꎬLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[t**M'뺟 io&  bzM!@'뺟 ԗOK:ꎬMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \2AUDIO_PLAYBACK_LOSSY_DVCop**N'뺟 io&  bzo!@'뺟 ԗOK:ꎬNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \TMicrosoft::Windows::RDS::Geometry::v08.01s**O&͟ io&  bzk!@&͟ ԗOK:ꎬOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \PMicrosoft::Windows::RDS::DisplayControlTS/** P$ io&  bzw!@$ ԗOK:ꎬ\PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*\TCP: Reason Code: 3 (No UDP Packets Received) ** Q$ io&  bzw!@$ ԗOK:ꎬ\QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r*\TCP: Reason Code: 3 (No UDP Packets Received)C **R io&  bz7! @ ԗOK:ꎬ"RMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -8**S io&  bz!@ ԗOK:ꎬ\SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**TAf io&  bz!@Af ԗOK:ꎬ\TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**UJr io&  bz!f@Jr ԗOK:ꎬUMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**Vu io&  bz!g@u ԗOK:ꎬVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1**hWʙ. io&  bz!@ʙ.3qb;GDWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`r`]/iL6tAAH 3=TransportProtocolName AH =Port TCP= Mich**Xʙ. io&  bz!!@ʙ.3qb;GDXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= **YBw̙. io&  bz!!@Bw̙.3qb;GDYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **ZBw̙. io&  bz!!@Bw̙.3qb;GDZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **[s+\* io&  bz!!@s+\*blJO$MT[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= **\s+\* io&  bz!!@s+\*blJO$MT\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= **]s+\* io&  bz!!@s+\*blJO$MT]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= 03D**^s+\* io&  bz!!@s+\*blJO$MT^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= ::RD**_ə| io&  bz?!@ə|zo 'nK4S;=_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:50807**`^ io&  bz'! A@^zo 'nK4S;=`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#0**a io&  bz! @zo 'nK4S;=aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8**bJ^2= io&  bz!f@J^2=zo 'nK4S;=bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[ **c4= io&  bz!g@4=zo 'nK4S;=cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1**d= io&  bz?!@=2 *J;vdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:51092}**e= io&  bz'! A@=2 *J;veMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#1O**f= io&  bz! @=2 *J;v%fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8**gas io&  bz!f@as2 *J;vgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[d**has io&  bz!g@as2 *J;v%hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1**is io&  bz?!@sfZ Ϡ@ZT7iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:51391 **js io&  bz'! A@sfZ Ϡ@ZT7jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#2r**ks io&  bz! @sfZ Ϡ@ZT7&kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8r**l* io&  bz!f@*fZ Ϡ@ZT7lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[e**m* io&  bz!g@*fZ Ϡ@ZT7&mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1e**nC io&  bz?!@CU CIRѩnMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:51699p**oC io&  bz'! A@CU CIRѩoMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#3o**pC io&  bz! @CU CIRѩh$pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8**qߓ io&  bz!f@ߓU CIRѩqMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**rߓ io&  bz!g@ߓU CIRѩh$rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1**s  io&  bz?!@  NEsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:52000**t  io&  bz'! A@  NEtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#4o**u  io&  bz! @  NEH&uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8**v ) io&  bz!f@ ) NEvMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[o**w ) io&  bz!g@ ) NEH&wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1p**xe io&  bz?!@e4 5!DlxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:52302p**ye io&  bz'! A@e4 5!DlyMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#5s**z. io&  bz! @.4 5!Dl'zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8s**{mL io&  bz!f@mL4 5!Dl{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s**|mL io&  bz!g@mL4 5!Dl'|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1s**}XM io&  bz?!@XML 1FMR/}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:526079**~XM io&  bz'! A@XML 1FMR/~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#6i**XM io&  bz! @XML 1FMR/T%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8s**L魂 io&  bz!f@L魂L 1FMR/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[t**L魂 io&  bz!g@L魂L 1FMR/T%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1t**H io&  bz?!@Hk6 f-CloMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:52908o**H io&  bz'! A@Hk6 f-CloMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#7c**H io&  bz! @Hk6 f-Clo&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8**X io&  bz!f@Xk6 f-CloMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**X io&  bz!g@Xk6 f-Clo&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1**KR io&  bz?!@KR1 ܍Daa]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:53213o**KR io&  bz'! A@KR1 ܍Daa]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#8t**KR io&  bz! @KR1 ܍Daa]'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8o**6f0 io&  bz!f@6f01 ܍Daa]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[o**6f0 io&  bz!g@6f01 ܍Daa]'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1** io&  bz?!@xn !nLAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:53502c** io&  bz'! A@xn !nLAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#9** io&  bz! @xn !nLA$"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8 **r% io&  bz!f@r%xn !nLAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**r% io&  bz!g@r%xn !nLA$"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1y**1& io&  bz?!@1&Y JaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť3 TCP127.0.0.1:53797n**1& io&  bz)! A@1&Y JaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt6RDP-Tcp#10nal **1& io&  bz! @1&Y JaD'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational M8 r**E[ io&  bz!f@E[Y JaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[r**E[ io&  bz!g@E[Y JaD'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x1eRdpCoreTS/Op io&  bz  bzzindows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputeTS/erational ElfChnkǛ=f?mMF5 =[U &**P:R\ io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@:R\a JϹMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[MDٽi&6h}> D EventDataA9oData=ConnType A'=ClientIP  TCP127.0.0.1:54089P**8:R\ io&  bz! A@:R\a JϹMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt kPt3L4 JL@A3%=ConnectionName RDP-Tcp#1198** :R\ io&  bzs! @:R\a JϹ$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 }r&TD8A+= InstanceID   **. io&  bz9!f@.a JϹMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U&| p)catio** . io&  bzs!g@.a JϹ$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=xXEMD8A+= ReasonCode eDe ** io&  bz?!@e lnN(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:54392o** io&  bz)! A@e lnN(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#12Mic** io&  bz! @e lnN( %Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5  **$:ȕ io&  bz!f@$:ȕe lnN(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &UH**$:ȕ io&  bz!g@$:ȕe lnN( %Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=9**7ȕ io&  bz?!@7ȕ| L,\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:54685v**7ȕ io&  bz)! A@7ȕ| L,\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#13Mic**ȕ io&  bz! @ȕ| L,\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5  **| io&  bz!f@|| L,\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U**| io&  bz!g@|| L,\%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=**}+ io&  bz?!@}+ E#IS)l6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:54998**}+ io&  bz)! A@}+ E#IS)l6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#14io&**}+ io&  bz! @}+ E#IS)l60%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 D**ʡ4 io&  bz!f@ʡ4 E#IS)l6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ur**ʡ4 io&  bz!g@ʡ4 E#IS)l60%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=**&W5 io&  bz?!@&W5 E}EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:55293**&W5 io&  bz)! A@&W5 E}EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#15g**&W5 io&  bz! @&W5 E}E@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 **j io&  bz!f@j E}EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U**j io&  bz!g@j E}E@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x='**vk io&  bz?!@vk;A *KH{uRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:55594o**vk io&  bz)! A@vk;A *KH{uRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#16**vk io&  bz! @vk;A *KH{uRt$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 g**\< io&  bz!f@\<;A *KH{uRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Uo**\< io&  bz!g@\<;A *KH{uRt$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=r**vzܡ io&  bz?!@vzܡC :O0^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:55897r**vzܡ io&  bz)! A@vzܡC :O0^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#17**vzܡ io&  bz! @vzܡC :O0^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 **fז io&  bz!f@fזC :O0^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ue**fז io&  bz!g@fזC :O0^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=e**ؖ io&  bz?!@ؖ QIbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:56189o**ؖ io&  bz)! A@ؖ QIbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#18pCor**ؖ io&  bz! @ؖ QIb%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 r**  io&  bz!f@  QIbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U-**  io&  bz!g@  QIb%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=p**\ io&  bz?!@\WL `@tKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:56484p**\ io&  bz)! A@\WL `@tKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#19a!**\ io&  bz! @\WL `@tK'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 **O D io&  bz!f@O DWL `@tKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Us**O D io&  bz!g@O DWL `@tK'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=r**D io&  bz?!@D Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:58836**h io&  bz)! A@h ׌@ >Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#27**h io&  bz! @h ׌@ >'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5  **  io&  bz!f@  ׌@ >Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ue**  io&  bz!g@  ׌@ >'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=o**t io&  bz?!@t s\KEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:59143/**t io&  bz)! A@t s\KEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#28x1**Z io&  bz! @Z s\KE"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 **nP, io&  bz!f@nP, s\KEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ud**nP, io&  bz!g@nP, s\KE"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=r**h, io&  bz?!@h,Xq uA@rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:59461r**h, io&  bz)! A@h,Xq uA@rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#29**h, io&  bz! @h,Xq uA@r#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 **nޒb io&  bz!f@nޒbXq uA@rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ur**nޒb io&  bz!g@nޒbXq uA@r#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=e**hu+c io&  bz?!@hu+cT @a?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:59760o**-c io&  bz)! A@-cT @a?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#30e**-c io&  bz! @-cT @a?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 C**Ҙ io&  bz!f@ҘT @a?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U/**Ҙ io&  bz!g@ҘT @a?'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=d**k io&  bz?!@kϩ !M7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:60056 **m io&  bz)! A@mϩ !M7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#31****m io&  bz! @mϩ !M7tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 2**ϙ io&  bz!f@ϙϩ !M7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Ur**ϙ io&  bz!g@ϙϩ !M7tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=r**Mϙ io&  bz?!@Mϙ-N :MHܑMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:60355**Mϙ io&  bz)! A@Mϙ-N :MHܑMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#32x**Mϙ io&  bz! @Mϙ-N :MHܑd'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5  .**FS io&  bz!f@FS-N :MHܑMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &Uo**FS io&  bz!g@FS-N :MHܑd'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=/** io&  bz?!@}Y g-A<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:60644s**a io&  bz)! A@a}Y g-A<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#33XM**a io&  bz! @a}Y g-A<X"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 !:**u; io&  bz!f@u;}Y g-A<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U **u; io&  bz!g@u;}Y g-A<X"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=r**  .< io&  bz?!@ .< 'ENԅ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:60937**  .< io&  bz)! A@ .< 'ENԅ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#34**  .< io&  bz! @ .< 'ENԅ$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 "0** :q io&  bz!f@:q 'ENԅ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U** :q io&  bz!g@:q 'ENԅ$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=o**|pr io&  bz?!@|prP GXVv*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:61237**|pr io&  bz)! A@|prP GXVv*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#35io&**|pr io&  bz! @|prP GXVv*$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 #o** io&  bz!f@P GXVv*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U** io&  bz!g@P GXVv*$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x= **9첨 io&  bz?!@9첨G ߇vAyHw&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:61521**9첨 io&  bz)! A@9첨G ߇vAyHw&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#36**9첨 io&  bz! @9첨G ߇vAyHw&@%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 $**.Xޚ io&  bz!f@.XޚG ߇vAyHw&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U-**.Xޚ io&  bz!g@.XޚG ߇vAyHw&@%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=**ޚ io&  bz?!@ޚ e0NO5l:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:61859**ޚ io&  bz)! A@ޚ e0NO5l:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#37**ޚ io&  bz! @ޚ e0NO5l:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 5 %**y  io&  bz!f@y  e0NO5l:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &U#**y  io&  bz!g@y  e0NO5l:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x=**7 io&  bz?!@7Q L|BxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD[ TCP127.0.0.1:62155**7 io&  bz)! A@7Q L|BxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt RDP-Tcp#38 io&  bzzzindows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputeTS/erational ElfChnk80U>=f?mMF[m &**7 io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz! @7Q L|Bx $Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [}r&TrfD EventDataA=oData= InstanceID &** yJ io&  bz9!f@yJQ L|Bx Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & &| p)ceTS/** !yJ io&  bzs!g@yJQ L|Bx $!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x xXEMD8A+= ReasonCode ice **p"1;zK io&  bz!@1;zK fW*EQl;"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭMDٽi&6h}> nbA'=ConnType A'=ClientIP  TCP127.0.0.1:62456p**8#1;zK io&  bz! A@1;zK fW*EQl;#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtkPt3L4 JL@A3%=ConnectionName RDP-Tcp#398**$1;zK io&  bz! @1;zK fW*EQl; $Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ['**%+O io&  bz!f@+O fW*EQl;%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**&+O io&  bz!g@+O fW*EQl; &Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**'sH io&  bz?!@sH\ K@MMhm'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:62768r**(sH io&  bz)! A@sH\ K@MMhm(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#40**)sH io&  bz! @sH\ K@MMhm$)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [(***ɾa io&  bz!f@ɾa\ K@MMhm*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**+ɾa io&  bz!g@ɾa\ K@MMhm$+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**,| io&  bz?!@|W ?EnK,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:63064r**-| io&  bz)! A@|W ?EnK-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#41**.| io&  bz! @|W ?EnKT.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [)**/v. io&  bz!f@v.W ?EnK/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**0v. io&  bz!g@v.W ?EnKT0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**1'? io&  bz?!@'?% LJgVۣ1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:63355r**2'? io&  bz)! A@'?% LJgVۣ2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#42**3'? io&  bz! @'?% LJgVۣl$3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [***4;# io&  bz!f@;#% LJgVۣ4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**5;# io&  bz!g@;#% LJgVۣl$5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**65$ io&  bz?!@5$X' ?XC۷Ĉ6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:63666r**75$ io&  bz)! A@5$X' ?XC۷Ĉ7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#43**85$ io&  bz! @5$X' ?XC۷Ĉ8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [+**9I$Z io&  bz!f@I$ZX' ?XC۷Ĉ9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**:I$Z io&  bz!g@I$ZX' ?XC۷Ĉ:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**;_BZ io&  bz?!@_BZԅ kDI;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:63951r**<_BZ io&  bz)! A@_BZԅ kDI<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#44**=_BZ io&  bz! @_BZԅ kDIt$=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [,**>f io&  bz!f@fԅ kDI>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**?f io&  bz!g@fԅ kDIt$?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**@O io&  bz?!@O) @7@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:64253r**AO io&  bz)! A@O) @7AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#45**BO io&  bz! @O) @7dBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [-**CcƜ io&  bz!f@cƜ) @7CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**DcƜ io&  bz!g@cƜ) @7dDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**E!Dǜ io&  bz?!@!Dǜ֋ 71OV#EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:64553r**F!Dǜ io&  bz)! A@!Dǜ֋ 71OV#FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#46**G!Dǜ io&  bz! @!Dǜ֋ 71OV#GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [.**H5 io&  bz!f@5֋ 71OV#HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**I5 io&  bz!g@5֋ 71OV#IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**JM io&  bz?!@M cG/JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:64869r**KM io&  bz)! A@M cG/KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#47**LM io&  bz! @M cG/#LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [/**MK+3 io&  bz!f@K+3 cG/MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**NK+3 io&  bz!g@K+3 cG/#NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**O<<3 io&  bz?!@<<3 tE\}TOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:65164r**P<<3 io&  bz)! A@<<3 tE\}TPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#48**Q3 io&  bz! @3 tE\}T&QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [0**Rki io&  bz!f@ki tE\}TRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**Ski io&  bz!g@ki tE\}T&SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**Tj io&  bz?!@j ܥD ђ[TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:65457r**Uj io&  bz)! A@j ܥD ђ[UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#49**Vj io&  bz! @j ܥD ђ['VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [1**W޿ io&  bz!f@޿ ܥD ђ[WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**X޿ io&  bz!g@޿ ܥD ђ['XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**Y4F io&  bz?!@4F D3VYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:49383r**Z4F io&  bz)! A@4F D3VZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#50**[4F io&  bz! @4F D3V"[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [2**\$՝ io&  bz!f@$՝ D3V\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**]$՝ io&  bz!g@$՝ D3V"]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**^(d֝ io&  bz?!@(d֝Yk {O:.-C^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:49696r**_(d֝ io&  bz)! A@(d֝Yk {O:.-C_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#51**`(d֝ io&  bz! @(d֝Yk {O:.-C $`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [3**ap+  io&  bz!f@p+ Yk {O:.-CaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**bp+  io&  bz!g@p+ Yk {O:.-C $bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**ceq  io&  bz?!@eq  kB cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:49977r**deq  io&  bz)! A@eq  kB dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#52**eeq  io&  bz! @eq  kB %eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [4**fkB io&  bz!f@kB kB fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**gkB io&  bz!g@kB kB %gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**hjC C io&  bz?!@jC Ca OrCZ?hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:50281r**ijC C io&  bz)! A@jC Ca OrCZ?iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#53**jjC C io&  bz! @jC Ca OrCZ?t$jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [5**kcWx io&  bz!f@cWxa OrCZ?kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**lcWx io&  bz!g@cWxa OrCZ?t$lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**mPIy io&  bz?!@PIyL tGߜVPmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:50570r**nPIy io&  bz)! A@PIyL tGߜVPnMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#54**oPIy io&  bz! @PIyL tGߜVPP#oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [6**pd io&  bz!f@dL tGߜVPpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**qd io&  bz!g@dL tGߜVPP#qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**r io&  bz?!@ ]B0rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:50864r**s^ io&  bz)! A@^ ]B0sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#55**t^ io&  bz! @^ ]B0'tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [7**uq. io&  bz!f@q. ]B0uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**vq. io&  bz!g@q. ]B0'vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**wQk io&  bz?!@QkL DSwMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:51148r**xQk io&  bz)! A@QkL DSxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#56**yQk io&  bz! @QkL DS$yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [8**zFn io&  bz!f@FnL DSzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**{Fn io&  bz!g@FnL DS${Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**|]d io&  bz?!@]dm[ J5G敨|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ TCP127.0.0.1:51454r**}]d io&  bz)! A@]dm[ J5G敨}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#57**~]d io&  bz! @]dm[ J5G敨%~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [9**X8- io&  bz!f@X8-m[ J5G敨Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**X8- io&  bz!g@X8-m[ J5G敨%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x r**hJ߈K' io&  bz!@J߈K' bNiPdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`r`]/iL6tAA3=TransportProtocolName A=Port TCP=  h**J߈K' io&  bz!!@J߈K' bNiPdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= z**J߈K' io&  bz!!@J߈K' bNiPdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **J߈K' io&  bz!!@J߈K' bNiPdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **@7- io&  bz!!@@7->b!Y@gЏxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP=  **@7- io&  bz!!@@7->b!Y@gЏxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= !**Z9- io&  bz!!@Z9->b!Y@gЏxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= @M**Z9- io&  bz!!@Z9->b!Y@gЏxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= z**yKyv io&  bz!!@yKyvmbsL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= b**yKyv io&  bz!!@yKyvmbsL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= !**Myv io&  bz!!@MyvmbsL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= -N**Myv io&  bz!!@MyvmbsL$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **N%! io&  bz!!@N%!>bIO(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= @a**N%! io&  bz!!@N%!>bIO(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= **N%! io&  bz!!@N%!>bIO(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= ;}Y**N%! io&  bz!!@N%!>bIO(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= X"**p7 io&  bzG!@p7 d!oK^,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ(TCP192.168.30.54:54292o**m< io&  bz'! A@m< d!oK^,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#0c**D io&  bz! @D d!oK^,&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [**/* io&  bz!f@/* d!oK^,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **^& io&  bzG!@^& @yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ(TCP192.168.30.54:54294o**xM io&  bz'! A@xM @yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#1t**t io&  bz! @t @y#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [c**˗ io&  bz!f@˗ @yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **t io&  bz!g@t @y#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x **t io&  bz!g@t d!oK^,&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x ** io&  bzG!@ 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ(TCP192.168.30.54:54297o** io&  bz'! A@ 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPtRDP-Tcp#2c** io&  bz! @ 8oJʅ]0\$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [**hN io&  bz!e@N 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).-h**`N io&  bz!@N 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \m\)UT4thA-= ChannelName A'=TunnelID rdplic`**N io&  bz)!@N 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \mrdpcmdio&**- io&  bz!b@- 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **- io&  bz!d@- 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **- io&  bzo!@- 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W) &W)8:MG@4A'=TunnelID **- io&  bz!@- 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)**P io&  bzK!@PT(kk@RfoDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ,UDP[192.168.30.54]:53559z**x io&  bzK!@xT(kk@RfoDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŭ,UDP[192.168.30.54]:53560ws-moteDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational ElfChnk((h`;/=f?mMFe?\:uS -=&u#**Hq  io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz! B@q  8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >[&>%o?D EventDataAEoData%=ConnectionName A)= SessionID RDP-Tcp#2H**E io&  bz9! !@E 8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & &| p)c**`E io&  bz!@E 8oJʅ]0%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ \)UT4thA-= ChannelName A'=TunnelID rdpgrfx`** io&  bz+!@ 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinpt456**` io&  bz!@ 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r-rr˩-HbxlA'=TunnelID A1#= TransportType UDP`** io&  bzW!@ 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)**X io&  bz!@ 8oJʅ]0H'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`u[&`J_Tpۉ%GrfA)= MajorType A)= MinorType ServX**" io&  bz#!@" 8oJʅ]0T(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPRdp**8 io&  bza!@8 8oJʅ]0X'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::Telemetrycros**R io&  bz_!@R 8oJʅ]0X'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphicso**5 io&  bz#!@5T(kk@RfoD Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPice**' io&  bz!@' 8oJʅ]0T(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<7< KfȤA%=Version A+= ClientMode A-= H264Enabled W** 7* io&  bz!@ 7* 8oJʅ]0hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **o: io&  bz]! @o: 8oJʅ]0%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational #f=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY S/**p> io&  bz! D@>T(kk@Rfo'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B&Ba$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#2U3n4orp**D io&  bz!@D 8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & d**K io&  bz!@K 8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**P io&  bz!@P 8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & i**zPZ io&  bz'!@zPZT(kk@RfoT(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr-**{[ io&  bzA!@{[T(kk@RfoT(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCvice**o^ io&  bzM!@o^ 8oJʅ]0T(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC**#P io&  bz!@#P 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & d** B1 io&  bzs!g@B1 8oJʅ]0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x6xXEMD8A+= ReasonCode  ** **C1 io&  bz!f@C1 8oJʅ]0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **xц io&  bz!@ц EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:MDٽi&6h}> nbA'=ConnType A'=ClientIP (TCP192.168.30.54:54331icx**8@ц io&  bz! A@@ц EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=kPt3L4 JL@A3%=ConnectionName RDP-Tcp#3Rdp8** Eц io&  bzs! @Eц EX+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?}r&TD8A+= InstanceID emo **MՆ io&  bz!f@MՆ EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**MՆ io&  bz!g@MՆ EX+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x6o**JՆ io&  bzG!@JՆr! H~E%vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:(TCP192.168.30.54:54333r**_Ն io&  bz'! A@_Նr! H~E%vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=RDP-Tcp#4r**x8Ն io&  bz! @x8Նr! H~E%v)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?o**XՆ io&  bz!f@XՆr! H~E%vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**XՆ io&  bz!g@XՆr! H~E%v)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x6o**@׆ io&  bzG!@@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:(TCP192.168.30.54:54349r**@׆ io&  bz'! A@@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=RDP-Tcp#5r**掃׆ io&  bz! @掃׆N Gύ 'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?o**hX׆ io&  bz!e@X׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0uSB)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**X׆ io&  bz)!@X׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdplic **X׆ io&  bz)!@X׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmd**׆ io&  bz!b@׆N Gύ\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **׆ io&  bz!d@׆N Gύ\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **׆ io&  bzo!@׆N Gύ\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)\6&W)8:MG@4A'=TunnelID **׆ io&  bz!@׆N Gύ\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)\<**ࢍ׆ io&  bz/! B@ࢍ׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >[RDP-Tcp#5 **Rf׆ io&  bzK!@Rf׆JHC]DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:,UDP[192.168.30.54]:54927tE\**Rf׆ io&  bzK!@Rf׆JHC]DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:,UDP[192.168.30.54]:54928t-W**׆ io&  bz! !@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & W**׆ io&  bz+!@׆N Gύ"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfxmot**7׆ io&  bz+!@7׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinptndo**7׆ io&  bz#!@7׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPt-W**7׆ io&  bzW!@7׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)p**7׆ io&  bz!@7׆N Gύ%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`u9**^׆ io&  bz#!@^׆N Gύ*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPMi**׆ io&  bza!@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::TelemetryRemo**׆ io&  bz_!@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphicsr**׆ io&  bz'!@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<r**׆ io&  bz!@׆N Gύh'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**n׆ io&  bz#!@n׆JHC]D Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPal **׆ io&  bz7! @׆N Gύ($Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational #o**D׆ io&  bzG! D@D׆JHC]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B&RDP-Tcp#5)***׆ io&  bz!@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **׆ io&  bz!@׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **l׆ io&  bz!@l׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **Y׆ io&  bz'!@Y׆JHC]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr/**z׆ io&  bzA!@z׆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCnal **x׆ io&  bzM!@x׆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC&**+؆ io&  bz/! B@+؆N GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >[RDP-Tcp#5**18؆ io&  bz'!@18؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr**-:؆ io&  bzA!@-:؆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVC**=؆ io&  bzM!@=؆N Gύ*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC**?؆ io&  bzo!@?؆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01o**?A؆ io&  bz7! @?A؆N Gύ4(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational #p**}A؆ io&  bzY!@}A؆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ >Microsoft::Windows::RDS::InputCore**"D؆ io&  bzk!@"D؆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ PMicrosoft::Windows::RDS::DisplayControlemo**f؆ io&  bz+!@f؆JHC]*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ cliprdrSer**+k؆ io&  bz!@+k؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & r**.z؆ io&  bz!@.z؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & o**ԑ؆ io&  bz!@ԑ؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & s**>؆ io&  bz!@>؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & e**؆ io&  bz!@؆N Gύ)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & p**oMO io&  bz!f@oMON GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & p**NO io&  bz!g@NON GύMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x6p**h h! io&  bz!@ h!bGHEbPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`r`]/iL6tAA3=TransportProtocolName A=Port TCP= eTS/h** h! io&  bz!!@ h!bGHEbPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= pCor** h! io&  bz!!@ h!bGHEbPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= Oper** h! io&  bz!!@ h!bGHEbPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= x ** D io&  bzI!@ D HPLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:*TCP192.168.23.170:551924r**KD io&  bz'! A@KD HPHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=RDP-Tcp#0**D io&  bz! @D HP,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?**CD io&  bz!f@CD HPDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **WDD io&  bzI!@WDD] hHhPLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:*TCP192.168.23.170:55195**vDD io&  bz'! A@vDD] hHhPHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=RDP-Tcp#1r**DD io&  bz! @DD] hHhPXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?o**ED io&  bz!g@ED HP,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x6d**ID io&  bz!f@ID] hHhPDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & i**ID io&  bz!g@ID] hHhPXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x69**D io&  bzI!@D D;g+PLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:*TCP192.168.23.170:55196Wind** D io&  bz'! A@D D;g+PH Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt-=RDP-Tcp#2d** D io&  bz! @D D;g+P( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational e?s** SD io&  bz_!e@SD D;g+Pl Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0uSLReason Code: 2(Server Configuration).r** SD io&  bz)!@SD D;g+Pl Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdplicvice** SD io&  bz)!@SD D;g+Pl Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmds-Rd**7 D io&  bz!b@7 D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & o**7 D io&  bz!d@7 D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**7 D io&  bz!@7 D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)\-**7 D io&  bz!@7 D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)\i** D io&  bz/! B@ D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >[RDP-Tcp#2s** D io&  bz! !@ D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & 9** D io&  bz+!@ D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfxces**;D io&  bz+!@;D D;g+PlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinptRdp**;D io&  bzW!@;D D;g+PlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)-**;D io&  bzW!@;D D;g+PlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r<TCP: Reason Code: 5 (Unknown)r**;D io&  bz!@;D D;g+PlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`ur** D io&  bza!@ D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::Telemetry[**D io&  bzM!@D& `MJQWPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:.UDP[192.168.23.170]:61246**HD io&  bz_!@HD D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphics**bD io&  bz'!@bD D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<**D io&  bzM!@D& `MJQWPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDŵ:.UDP[192.168.23.170]:61247**bD io&  bz#!@bD& `MJQWP\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDP**l(D io&  bz!@l(D D;g+PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & N** D.D io&  bz#!@D.D& `MJQWP Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rUDPrat**!>D io&  bz7! @>D D;g+P!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational #@**"cSED io&  bzG! D@cSED& `MJQWP"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B&RDP-Tcp#2 e**#$ID io&  bz!@$ID D;g+Pt#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**$PD io&  bz!@PD D;g+Pt$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**% UD io&  bz!@ UD D;g+P%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & -**&~cD io&  bz'!@~cD& `MJQWPt&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdrp**'NfD io&  bzA!@NfD& `MJQWPt'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVCIQB'**(NhD io&  bzM!@NhD D;g+Pt(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC'Microsoft-Wi io&  bztional MDŭ,UDP[192.168.30.54]:53560ws-moteDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational ElfChnk))~ =f?mMF=9/] []5k=M[H**)ҥD io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bzU!@ҥD D;g+P)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[&| p)c."D EventData***D io&  bz !@D& `MJQWP*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] \)UT4zA? oData= ChannelName A' =TunnelID TMicrosoft::Windows::RDS::Geometry::v08.01**+{аD io&  bzY!@{аD& `MJQWP+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::Input**,:D io&  bzk!@:D& `MJQWP,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] PMicrosoft::Windows::RDS::DisplayControl**-1eD io&  bz+!@1eD& `MJQWP-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] cliprdrunn**.'` E io&  bz!f@'` E D;g+PD.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[-** /l` E io&  bzs!g@l` E D;g+PX"/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+ = ReasonCode Ser **x0m E io&  bz!@m E E&HPL0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDMDٽi&6h}> nbA' =ConnType A' =ClientIP *TCP192.168.23.170:54356/x**817n E io&  bz! A@7n E E&HPH1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]kPt3L4 JL@A3 %=ConnectionName RDP-Tcp#3lem8** 2L:n E io&  bzs! @L:n E E&HP$"2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ו}r&TD8A+ = InstanceID o **3Ar E io&  bz!f@Ar E E&HPD3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**4Ar E io&  bz!g@Ar E E&HP$"4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x **5j?s E io&  bzI!@j?s E3 jMUPL5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:54358-Rdp**6fs E io&  bz'! A@fs E3 jMUPH6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]RDP-Tcp#4'**7s E io&  bz! @s E3 jMUPl7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ו**8(&v E io&  bz!f@(&v E3 jMUPD8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[r**9(&v E io&  bz!g@(&v E3 jMUPl9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x2**:w E io&  bzI!@w E IKv4 PL:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:54359io&**;7w E io&  bz'! A@7w E IKv4 PH;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]RDP-Tcp#5**<^w E io&  bz! @^w E IKv4 P<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ו**h=Ɲ E io&  bz!e@Ɲ E IKv4 Ph=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0/B)0ʽ "=`H<A/ != ReasonString LReason Code: 2(Server Configuration).Rh**>Ɲ E io&  bz)!@Ɲ E IKv4 Ph>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdplicroso**?Ɲ E io&  bz)!@Ɲ E IKv4 Ph?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpcmd**@ E io&  bz!b@ E IKv4 PT@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**A E io&  bz!d@ E IKv4 PTAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**B E io&  bzo!@ E IKv4 PTBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=9&W)8:MG@4A' =TunnelID **C E io&  bz!@ E IKv4 PTCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=9.**D) E io&  bzM!@) Erѕl"IaPDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:49888**E\ E io&  bzM!@\ Erѕl"IaPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:49889io**pF\ E io&  bz! B@\ E IKv4 PFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >A&>%o?|pA3 %=ConnectionName A) = SessionID RDP-Tcp#5p**G E io&  bz! !@ E IKv4 PGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**H E io&  bz+!@ E IKv4 P4 HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpgrfx_**Ix E io&  bz+!@x E IKv4 PhIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpinpt**`Jx E io&  bz!@x E IKv4 PhJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rH-rr˩-HbxlA' =TunnelID A1 #= TransportType UDPMic`**Kx E io&  bzW!@x E IKv4 PhKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rH<TCP: Reason Code: 5 (Unknown)s**XL E io&  bz!@ E IKv4 PhLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`=MA&`J_Tpۉ%GrfA) = MajorType A) = MinorType atioX**M E io&  bz#!@ E IKv4 P\MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rHUDP-Rd**NB E io&  bza!@B E IKv4 P\NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] FMicrosoft::Windows::RDS::Telemetryo**OB E io&  bz_!@B E IKv4 P!OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] DMicrosoft::Windows::RDS::Graphicsg**PB E io&  bz!@B E IKv4 P\PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<}U7< KfȤA% =Version A+ = ClientMode A- = H264Enabled **Q E io&  bz!@ E IKv4 PXQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**R쓕 E io&  bz#!@쓕 Erѕl"IaPRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rHUDP**SRd E io&  bz]! @Rd E IKv4 PSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [}Uf=JCA+ = MonitorNum A/ != MonitorWidth A1 #= MonitorHeight A' =MonitorX A' =MonitorY @io**T` E io&  bz!@` E IKv4 P\TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[-**UrЬ E io&  bz!@rЬ E IKv4 P\UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[s**V⭕ E io&  bz!@⭕ E IKv4 P\VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[e**Wo E io&  bz!@o E IKv4 PWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[o**Xeŕ E io&  bz'!@eŕ Erѕl"IaPXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdr**YǕ E io&  bzA!@Ǖ Erѕl"IaPYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVCemot**ZHʕ E io&  bzM!@Hʕ E IKv4 PZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVCes**p[˕ E io&  bz! D@˕ Erѕl"IaP\[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B5kBa$fZA3 %=ConnectionName A? 1=PromptForCredentials AG 9=PromptForCredentialsDone A7 )=GfxChannelOpened AA 3=FirstGraphicsReceived RDP-Tcp#5x-Wp**\d E io&  bz/! B@d E IKv4 P\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >ARDP-Tcp#5**] E io&  bz7! @ E IKv4 Pt]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [@c**^5 E io&  bz'!@5 E IKv4 P!^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdrc**_ E io&  bzY!@ Erѕl"IaP\_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::Input**` E io&  bzA!@ Erѕl"IaP\`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVC**a E io&  bzo!@ Erѕl"IaP\aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01t**b(E E io&  bzM!@(E E IKv4 PbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVC'**c E io&  bzo!@ Erѕl"IaPcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01r**d E io&  bz+!@ Erѕl"IaP!dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] cliprdrkto**emr E io&  bzk!@mr Erѕl"IaP!eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] PMicrosoft::Windows::RDS::DisplayControlTS/**fWH E io&  bz!@WH E IKv4 P!fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[/**gBM E io&  bz!f@BM E IKv4 PDgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[/**hS E io&  bz!g@S E IKv4 P!hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xr**iNTE io&  bzI!@NTEM } KP-PLiMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:57931AU**jc{E io&  bz'! A@c{EM } KP-PHjMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]RDP-Tcp#6o**kɯE io&  bz! @ɯEM } KP-PkMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational וo**l^zE io&  bz!f@^zEM } KP-PDlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[d**m^zE io&  bz!g@^zEM } KP-PmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xs**nzE io&  bzI!@zE1& d C4PLnMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:59532oft-**ozE io&  bz'! A@zE1& d C4PHoMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]RDP-Tcp#7e**p{E io&  bz! @{E1& d C4P#pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational וc**qo}E io&  bz!f@o}E1& d C4PDqMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**ro}E io&  bz!g@o}E1& d C4P#rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**s~E io&  bzI!@~E& -i|AҷPLsMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:59533**t-~E io&  bz'! A@-~E& -i|AҷPHtMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt]RDP-Tcp#8**uF~E io&  bz! @F~E& -i|AҷP4uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ו**voE io&  bz_!e@oE& -i|AҷPTvMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0/LReason Code: 2(Server Configuration).**woE io&  bz)!@oE& -i|AҷPTwMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdplic**xoE io&  bz)!@oE& -i|AҷPTxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpcmdMic**yv+E io&  bz!b@v+E& -i|AҷPhyMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[c**zv+E io&  bz!d@v+E& -i|AҷPhzMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[c**{v+E io&  bz!@v+E& -i|AҷPh{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=9c**|v+E io&  bz!@v+E& -i|AҷPh|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)=9**}*dE io&  bz/! B@*dE& -i|AҷP@}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >ARDP-Tcp#8**~NE io&  bz! !@NE& -i|AҷP@~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**NE io&  bz+!@NE& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpgrfx**uE io&  bzM!@uEr|FkPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:61650**蜒E io&  bzM!@蜒Er|FkPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:61651**E io&  bz+!@E& -i|AҷPTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] rdpinpt** GE io&  bz#!@ GE& -i|AҷPTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rHUDPb** GE io&  bzW!@ GE& -i|AҷPTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rH<TCP: Reason Code: 5 (Unknown)** GE io&  bz!@ GE& -i|AҷPTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`=M** GE io&  bz#!@ GE& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rHUDP!**ذE io&  bza!@ذE& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] FMicrosoft::Windows::RDS::Telemetryroso**ذE io&  bz_!@ذE& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] DMicrosoft::Windows::RDS::Graphicse**ذE io&  bz'!@ذE& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<}U'**7E io&  bz!@7E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[t**E io&  bz#!@Er|FkPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -rHUDPmot**r2E io&  bz7! @r2E& -i|AҷP0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [@s**E io&  bz!@E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**캬E io&  bz!@캬E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**}E io&  bz!@}E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[**{άE io&  bz'!@{άEr|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdr**rtЬE io&  bzA!@rtЬEr|FkPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVCroso**ҬE io&  bzM!@ҬE& -i|AҷP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVCrv**cݬE io&  bzG! D@cݬEr|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B5kRDP-Tcp#8Jqi**E io&  bz/! B@E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >ARDP-Tcp#8i**v E io&  bz7! @v E& -i|AҷPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational [@o**$E io&  bzY!@$Er|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] >Microsoft::Windows::RDS::InputpCor**$E io&  bzo!@$Er|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01:**CE io&  bz'!@CE& -i|AҷP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \]  rdpdrr**mE io&  bzA!@mEr|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] &AUDIO_PLAYBACK_DVCpCor**mE io&  bzo!@mEr|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] TMicrosoft::Windows::RDS::Geometry::v08.01n**&E io&  bzM!@&E& -i|AҷP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] 2AUDIO_PLAYBACK_LOSSY_DVCUD**_E io&  bzk!@_Er|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] PMicrosoft::Windows::RDS::DisplayControlows**_E io&  bz+!@_Er|FkP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \] cliprdr<**ه,E io&  bz!@ه,E& -i|AҷP@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[r**CiZE io&  bz!f@CiZE& -i|AҷPDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &[o**tmZE io&  bz!g@tmZE& -i|AҷP`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xd**hwX`_ io&  bz!@wX`_=?b)Ew yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`r`]/iL6tAA 3=TransportProtocolName A =Port TCP= io&h**wX`_ io&  bz!!@wX`_=?b)Ew yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= cSE**wX`_ io&  bz!!@wX`_=?b)Ew yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **wX`_ io&  bz!!@wX`_=?b)Ew yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= $**'g io&  bz!!@'g_b OFqiTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= io&**'g io&  bz!!@'g_b OFqiTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`TCP= **.S'g io&  bz!!@.S'g_b OFqiTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= **.S'g io&  bz!!@.S'g_b OFqiTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`UDP= D**b h io&  bzI!@b h 6A2hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:54792Wio& io&  bzUDP[192.168.30.54]:53560ws-moteDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational ElfChnk++@=f?mMF )uU" [mZ->L9**Fh io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz! A@Fh 6A2hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[kPt3L4 JznD EventDataAEoData%=ConnectionName RDP-Tcp#0** Th io&  bzs! @Th 6A2h\:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ }r&TD8A+= InstanceID ws: **h io&  bz9!f@h 6A2h\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & &| p)c\] ** =h io&  bzs!g@=h 6A2h\:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+= ReasonCode ros **xmh io&  bz!@mh NW:xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDMDٽi&6h}> nbA'=ConnType A'=ClientIP *TCP192.168.23.170:54794x**ʫh io&  bz'! A@ʫh NW:xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#1**h io&  bz! @h NW:x8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ **¯h io&  bz!f@¯h NW:x\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & h**¯h io&  bz!g@¯h NW:x8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xs**h io&  bzI!@hE+ O}t}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:54796roso**h io&  bz'! A@hE+ O}t}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#2**&h io&  bz! @&hE+ O}t}'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ **hh io&  bz!e@hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).'h**`h io&  bz!@hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"\)UT4thA-= ChannelName A'=TunnelID rdplicS/`**h io&  bz)!@hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpcmdOper**bh io&  bz!b@bhE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & /**bh io&  bz!d@bhE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & /**bh io&  bzo!@bhE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))&W)8:MG@4A'=TunnelID 3**bh io&  bz!@bhE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))**ph io&  bz! B@hE+ O}t}3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >-&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#2Ep**#h io&  bz! !@#hE+ O}t}3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & o**#h io&  bz+!@#hE+ O}t}8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpgrfx**%h io&  bzM!@%hI)H6ʂ|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:63741**E&h io&  bzM!@E&hI)H6ʂ|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:63740** e'h io&  bz+!@ e'hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpinpt **"'h io&  bz!@"'hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9-rr˩-HbxlA'=TunnelID A1#= TransportType <TCP: Reason Code: 5 (Unknown)o**"'h io&  bzW!@"'hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9<TCP: Reason Code: 5 (Unknown)e**X"'h io&  bz!@"'hE+ O}t} Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`->-&`J_Tpۉ%GrfA)= MajorType A)= MinorType viceX**v(h io&  bz#!@v(hI)H6ʂ(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9UDPws-**2h io&  bza!@2hE+ O}t}(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"FMicrosoft::Windows::RDS::TelemetryeDes**2h io&  bz_!@2hE+ O}t}(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"DMicrosoft::Windows::RDS::Graphics-**2h io&  bz!@2hE+ O}t}(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7-RDP-Tcp#2e**2h io&  bz'!@2hE+ O}t}3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U" rdpdri**h io&  bzA!@hI)H6ʂ3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"&AUDIO_PLAYBACK_DVCskto**h io&  bzo!@hI)H6ʂ3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"TMicrosoft::Windows::RDS::Geometry::v08.01**şh io&  bzM!@şhE+ O}t}(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"2AUDIO_PLAYBACK_LOSSY_DVC**&h io&  bz7! @&hE+ O}t}9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational L@** øh io&  bz!@ øhE+ O}t}3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & S**P8h io&  bzY!@P8hI)H6ʂ3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U">Microsoft::Windows::RDS::Input=**лh io&  bzk!@лhI)H6ʂ3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"PMicrosoft::Windows::RDS::DisplayControlIK**h io&  bz!@hE+ O}t}5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **(%h io&  bz+!@(%hI)H6ʂ5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"cliprdrz**h io&  bz!@hE+ O}t}3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & ** h io&  bz!@ hE+ O}t}5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **r7z io&  bz!g@r7zE+ O}t}4-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x_**E$7z io&  bz!f@E$7zE+ O}t}\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & /**$ io&  bzI!@$ b ƽKU,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:50239pSer**RR io&  bz'! A@RR b ƽKU,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#3d**ky io&  bz! @ky b ƽKU,%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ s**O io&  bz!f@O b ƽKU,\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & W**O io&  bz!g@O b ƽKU,%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x** io&  bzI!@ |MAD1 ;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:50241**̯ io&  bz'! A@̯ |MAD1 ;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#4W**֩ io&  bz! @֩ |MAD1 ; <Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ W**mo io&  bz!f@mo |MAD1 ;\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & ø**mo io&  bz!g@mo |MAD1 ; <Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**|Z io&  bzI!@|Z9 GKLkMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD*TCP192.168.23.170:50242**Z io&  bz'! A@Z9 GKLkMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPt[RDP-Tcp#5W**Z io&  bz! @Z9 GKLk>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ׽ W**8;u io&  bz_!e@8;u9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0LReason Code: 2(Server Configuration).R**8;u io&  bz)!@8;u9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdplicemot**8;u io&  bz)!@8;u9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpcmdServ** y io&  bz!b@ y9 GKLkHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & v** y io&  bz!d@ y9 GKLkHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & p** y io&  bz!@ y9 GKLkHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))c** y io&  bz!@ y9 GKLkHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W))**/{ io&  bz/! B@/{9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >-RDP-Tcp#5o**A| io&  bz! !@A|9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & **A| io&  bz+!@A|9 GKLk9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpgrfx!**} io&  bzM!@}B6|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:50879A**R} io&  bzM!@R}B6|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD.UDP[192.168.23.170]:50878do**⇀ io&  bz+!@⇀9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"rdpinpttop** io&  bz#!@9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9UDPces** io&  bzW!@9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9<TCP: Reason Code: 5 (Unknown)d** io&  bz!@9 GKLk.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`->s** io&  bz#!@9 GKLkDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r9UDPws-**j| io&  bza!@j|9 GKLkCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"FMicrosoft::Windows::RDS::TelemetrypCor**j| io&  bz_!@j|9 GKLkCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"DMicrosoft::Windows::RDS::Graphicsr**j| io&  bz'!@j|9 GKLkCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7-RDP-Tcp#5s**0  io&  bz'!@0 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U" rdpdrs**T  io&  bzA!@T B6;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"&AUDIO_PLAYBACK_DVCoft-**T  io&  bzo!@T B6;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"TMicrosoft::Windows::RDS::Geometry::v08.01o**p  io&  bzM!@p 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"2AUDIO_PLAYBACK_LOSSY_DVCO_**;  io&  bz7! @; 9 GKLk`9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational L@**  io&  bzY!@ B6DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U">Microsoft::Windows::RDS::Input**  io&  bzk!@ B6DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"PMicrosoft::Windows::RDS::DisplayControlv **  io&  bz+!@ B6;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \U"cliprdr**Jk  io&  bz!@Jk 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & s**]J%  io&  bz!@]J% 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & e**.f  io&  bz!@.f 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & e**Ѭ  io&  bz!@Ѭ 9 GKLk;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & v**? io&  bz!f@?9 GKLk\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational & o**? io&  bz!g@?9 GKLkDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**hΓH io&  bz!@ΓHbZ"!MJ!R( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`ur`]/iL6tAA3=TransportProtocolName A=Port TCP= ws-Rh**ΓH io&  bz!!@ΓHbZ"!MJ!R( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= |F**ΓH io&  bz!!@ΓHbZ"!MJ!R( Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= E&** ΓH io&  bz!!@ΓHbZ"!MJ!R(  Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= D**!KO io&  bz!!@KO&bIPt<@!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= Mic**"KO io&  bz!!@KO&bIPt<@"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= ft-W**#O io&  bz!!@O&bIPt<@#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= **$O io&  bz!!@O&bIPt<@$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= **%Uc$3h io&  bz!!@Uc$3h=bƹOݒiX%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= **&Uc$3h io&  bz!!@Uc$3h=bƹOݒiX&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= **'&$3h io&  bz!!@&$3h=bƹOݒiX'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= **(&$3h io&  bz!!@&$3h=bƹOݒiX(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP= **)C씚 io&  bz!!@C씚0UbKKp~)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= ***C씚 io&  bz!!@C씚0UbKKp~*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uTCP= **+C씚 io&  bz!!@C씚0UbKKp~+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`uUDP=  io& io&  bz2.168.30.54]:53560ws-moteDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational ElfChnk,,{?=f?mMF]. M$[&e S-BP=**@,C씚 io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!@C씚0UbKKp~,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[r`]/iL6D EventDataASoData3=TransportProtocolName A=Port UDP= @**x-d捠 io&  bz!@d捠 4I'ot-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD MDٽi&6h}> nbA'=ConnType A'=ClientIP *TCP192.168.23.170:57618x**8.]ꍠ io&  bz! A@]ꍠ 4I'o.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte kPt3L4 JL@A3%=ConnectionName RDP-Tcp#0ndo8** /  io&  bzs! @  4I'oU/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם}r&TD8A+= InstanceID ndo **0D io&  bz9!f@D 4I'o0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &&| p)c** 1D io&  bzs!g@D 4I'oU1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational xxXEMD8A+= ReasonCode NW **2F io&  bzI!@FQ ۢUIt2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:50061ft-W**3F io&  bz'! A@FQ ۢUI3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#1t**4 G io&  bz! @ GQ ۢUIT4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational םt**5,UI io&  bz!f@,UIQ ۢUI5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**6,UI io&  bz!g@,UIQ ۢUIT6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x}**7집 io&  bzI!@집 &Fr)t7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:59716ft-W**8 io&  bz'! A@ &Fr)8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#2**9: io&  bz! @: &Fr)Z9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational םn**h:TӪ io&  bz!e@TӪ &Fr)XT:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0M$B)0ʽ "=`H<A/!= ReasonString LReason Code: 2(Server Configuration).h**`;TӪ io&  bz!@TӪ &Fr)XT;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&\)UT4thA-= ChannelName A'=TunnelID rdplic-W`**<TӪ io&  bz)!@TӪ &Fr)XT<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpcmdeDes**=h io&  bz!b@h &Fr)=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &+**>h io&  bz!d@h &Fr)>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &¸**?h io&  bzo!@h &Fr)?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)].&W)8:MG@4A'=TunnelID **@h io&  bz!@h &Fr)@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)].**Ay io&  bzM!@yjTbF =AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:65507**B io&  bzM!@jTbF =BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:65508**pCf‘ io&  bz! B@f‘ &Fr)CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >%6&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#2t-Wp**DOƑ io&  bz! !@OƑ &Fr)DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**EOƑ io&  bz+!@OƑ &Fr)tYEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpgrfxown**Frȑ io&  bz+!@rȑ &Fr)XTFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpinptRea**`Grȑ io&  bz!@rȑ &Fr)XTGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=-rr˩-HbxlA'=TunnelID A1#= TransportType UDPTyp`**Hrȑ io&  bz#!@rȑ &Fr)XTHMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDPal **XIrȑ io&  bz!@rȑ &Fr)XTIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`-B%6&`J_Tpۉ%GrfA)= MajorType A)= MinorType X**Jrȑ io&  bz#!@rȑ &Fr)ZJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP::G**Krȑ io&  bz#!@rȑ &Fr)ZKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP7**L ʑ io&  bza!@ ʑ &Fr)YLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&FMicrosoft::Windows::RDS::Telemetrycros**M ʑ io&  bz_!@ ʑ &Fr)YMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&DMicrosoft::Windows::RDS::Graphicsr**NGʑ io&  bz!@GʑjTbF =YNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<=L7< KfȤA%=Version A+= ClientMode A-= H264Enabled 1**Oˑ io&  bz!@ˑ &Fr)NOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &p**P~ io&  bz]! @~ &Fr)tYPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational P=Lf=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY @E+**pQv io&  bz! D@vjTbF =QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BSBa$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#2\p**Rn io&  bz!@n &Fr)0KRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**S io&  bz!@ &Fr)0KSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**T io&  bz!@ &Fr)TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**U߼O io&  bz'!@߼OjTbF =YUMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \& rdpdr**VjQ io&  bzA!@jQjTbF =YVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&&AUDIO_PLAYBACK_DVC**W*T io&  bzM!@*T &Fr)0KWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&2AUDIO_PLAYBACK_LOSSY_DVC**X̭ io&  bz/! B@̭ &Fr)0KXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >%6RDP-Tcp#2**Y io&  bz7! @ &Fr)OYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational P@**Zı io&  bz'!@ı &Fr)ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \& rdpdrK**[8 io&  bzA!@8jTbF =0K[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&&AUDIO_PLAYBACK_DVC@**\ io&  bzM!@ &Fr)Z\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&2AUDIO_PLAYBACK_LOSSY_DVC**]’ io&  bzo!@’jTbF =0K]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&TMicrosoft::Windows::RDS::Geometry::v08.01**^eĒ io&  bzY!@eĒjTbF =Z^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&>Microsoft::Windows::RDS::Input**_DŒ io&  bz!@DŒ &Fr)_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**`!ɒ io&  bzk!@!ɒjTbF =Z`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&PMicrosoft::Windows::RDS::DisplayControlz**aD˒ io&  bz!@D˒ &Fr)aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**b$˒ io&  bz+!@$˒jTbF =bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&cliprdrE+**c璠 io&  bz!@璠 &Fr)ZcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &$**d io&  bz!@ &Fr)ZdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**e io&  bz!@ &Fr)eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**fl io&  bzo!@ljTbF =0KfMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&TMicrosoft::Windows::RDS::Geometry::v08.01b**g\Zo io&  bzo!@\ZojTbF =0KgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&TMicrosoft::Windows::RDS::Geometry::v08.01t**h#- io&  bz!@#- &Fr)0KhMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &t**ilN io&  bz!g@lN &Fr)0KiMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x t**jɰ io&  bz!f@ɰ &Fr)jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**kKl io&  bz!!@KlytbD\kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= <**lKl io&  bz!!@KlytbD\lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[TCP= **mKl io&  bz!!@KlytbD\mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ft-W**nKl io&  bz!!@KlytbD\nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`[UDP= ws-R**on io&  bzI!@nI UL2 mtoMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:54286ws-R**pn io&  bz'! A@nI UL2 mt,pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#0R**qyn io&  bz! @ynI UL2 mtTqMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational םR**r>@q io&  bzI!@>@q l0.Km.rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:54288ft-W**s>@q io&  bz'! A@>@q l0.Km.,sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#1o**t>@q io&  bz! @>@q l0.Km.tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם**u-Cq io&  bz!f@-CqI UL2 mtuMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**v-Cq io&  bz!f@-Cq l0.Km.vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**w-Cq io&  bz!g@-Cq l0.Km.wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**x-Cq io&  bz!g@-CqI UL2 mtTxMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**yYGq io&  bzI!@YGq / DVgyMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:54289ft-W**zYGq io&  bz'! A@YGq / DVg,zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#2t**{YGq io&  bz! @YGq / DVg{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational םW**|Lq io&  bz_!e@Lq / DVg|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0M$LReason Code: 2(Server Configuration).R**}Lq io&  bz)!@Lq / DVg}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdplicMic**~Lq io&  bz)!@Lq / DVg~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpcmdMic**{Qq io&  bz!b@{Qq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**{Qq io&  bz!d@{Qq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**{Qq io&  bz!@{Qq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)].**{Qq io&  bz!@{Qq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)].**{Qq io&  bz/! B@{Qq / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >%6RDP-Tcp#2**-Sq io&  bz! !@-Sq / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s**-Sq io&  bz+!@-Sq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpgrfxper**-Sq io&  bzM!@-Sq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:63896***-Sq io&  bzM!@-Sq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:63897**@Vq io&  bz+!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpinpto&**@Vq io&  bzW!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=<TCP: Reason Code: 5 (Unknown)**@Vq io&  bzW!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=<TCP: Reason Code: 5 (Unknown)**@Vq io&  bz!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`-B9**@Vq io&  bz#!@@Vq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP4 **Xq io&  bza!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&FMicrosoft::Windows::RDS::Telemetryemot**Xq io&  bz_!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&DMicrosoft::Windows::RDS::Graphicsv**Xq io&  bz'!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<=Lo**>[q io&  bz!@>[q / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**fq io&  bz7! @fq / DVg Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational P@o**fq io&  bz#!@fq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP;**zq io&  bz!@zq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &***q io&  bz!@*q / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**q io&  bz!@q / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**ۑq io&  bz'!@ۑq=,JlG]/#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \& rdpdr**=q io&  bzA!@=q=,JlG]/#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&&AUDIO_PLAYBACK_DVCOper**2q io&  bzM!@2q / DVg\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&2AUDIO_PLAYBACK_LOSSY_DVCce**)q io&  bzG! D@)q=,JlG]/#$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BSRDP-Tcp#2^w/**nHw io&  bz!@nHw / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &/**ow io&  bzo!@ow=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&TMicrosoft::Windows::RDS::Geometry::v08.01**w io&  bzY!@w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&>Microsoft::Windows::RDS::Input@**>4w io&  bzk!@>4w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&PMicrosoft::Windows::RDS::DisplayControlmot**w io&  bz+!@w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&cliprdrerv**Ԣ io&  bz!f@Ԣ / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**Ԣ io&  bz!g@Ԣ / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**TH io&  bzI!@TH+ jNKp-ebMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:57939b**0TH io&  bz'! A@0TH+ jNKp-eb,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#3**XTH io&  bz! @XTH+ jNKp-eb+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם**| WH io&  bz!f@| WH+ jNKp-ebMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**| WH io&  bz!g@| WH+ jNKp-eb+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**eWH io&  bzI!@eWH Cb #Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:58159**WH io&  bz'! A@WH Cb #,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#4**WH io&  bz! @WH Cb #'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם**sWH io&  bz!f@sWH Cb #Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**sWH io&  bz!g@sWH Cb #'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**WH io&  bzI!@WH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:58160**(WH io&  bz'! A@(WH ZOC,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#5**A WH io&  bz! @A WH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם io&  bzeDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational ElfChnk(ZHώl=f?mMF-c[Me -8%'}5"**H9WH io&iozZgAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-3PIMCL4OH3LAB.SecurityfLUserID !  bz!e@9WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B)0[B)0ʽ "=`vjD EventDataAAoData!= ReasonString LReason Code: 2(Server Configuration).**H**`9WH io&  bz!@9WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ \)UT4thA-= ChannelName A'=TunnelID rdplic0:`**9WH io&  bz)!@9WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpcmd JL**enWH io&  bz9!b@enWH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-&| p)cvice**enWH io&  bz!d@enWH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-p**enWH io&  bzo!@enWH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)&W)8:MG@4A'=TunnelID -**enWH io&  bz!@enWH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &W)R** WH io&  bz!@ WHs&ͣH{ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDťMDٽi&6h}> nbA'=ConnType A'=ClientIP .UDP[192.168.23.170]:55964kto**!WH io&  bzM!@!WHs&ͣH{ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MDť.UDP[192.168.23.170]:55965S/**p!H2WH io&  bz! B@!H2WH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >&>%o?|pA3%=ConnectionName A)= SessionID RDP-Tcp#5@,Up**Y3WH io&  bz! !@Y3WH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**Y3WH io&  bz+!@Y3WH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpgrfx **=y7WH io&  bz+!@=y7WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ rdpinptb**`=y7WH io&  bz!@=y7WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r"-rr˩-HbxlA'=TunnelID A1#= TransportType UDPces`**=y7WH io&  bz#!@=y7WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r"UDPz**X=y7WH io&  bz!@=y7WH ZOC<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`%'&`J_Tpۉ%GrfA)= MajorType A)= MinorType bX**R7WH io&  bz#!@R7WH ZOCp'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r"UDP **R7WH io&  bz#!@R7WH ZOCp'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r"UDP!**4'9WH io&  bza!@4'9WH ZOC*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ FMicrosoft::Windows::RDS::Telemetryft-W**c#;WH io&  bz_!@c#;WH ZOC*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ DMicrosoft::Windows::RDS::Graphicsc**;WH io&  bz!@;WHs&ͣH{$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<517< KfȤA%=Version A+= ClientMode A-= H264Enabled TS/**m=WH io&  bz!@m=WH ZOC Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &--**YfWH io&  bz]! @YfWH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }551f=JCA+= MonitorNum A/!= MonitorWidth A1#= MonitorHeight A'=MonitorX A'=MonitorY @p#**pZvWH io&  bz! D@ZvWHs&ͣH{%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational B8Ba$fZA3%=ConnectionName A?1=PromptForCredentials AG9=PromptForCredentialsDone A7)=GfxChannelOpened AA3=FirstGraphicsReceived RDP-Tcp#5.8Jl p**WH io&  bz!@WH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-r**WH io&  bz!@WH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-o**WH io&  bz!@WH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-c**xWH io&  bz'!@xWHs&ͣH{p'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdrc**WWH io&  bzA!@WWHs&ͣH{p'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVC**>WH io&  bzM!@>WH ZOCp'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC** XH io&  bz/! B@ XH ZOC$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational >RDP-Tcp#5 **%XH io&  bzY!@%XHs&ͣH{p'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ >Microsoft::Windows::RDS::Input**%XH io&  bzo!@%XHs&ͣH{p'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01T**8%XH io&  bz7! @8%XH ZOCPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }5@**q&XH io&  bz'!@q&XH ZOC*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \  rdpdr**='XH io&  bzA!@='XHs&ͣH{$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ &AUDIO_PLAYBACK_DVC**='XH io&  bzo!@='XHs&ͣH{$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ TMicrosoft::Windows::RDS::Geometry::v08.01p***XH io&  bzM!@*XH ZOCp'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ 2AUDIO_PLAYBACK_LOSSY_DVC***XH io&  bzk!@*XHs&ͣH{p'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ PMicrosoft::Windows::RDS::DisplayControlper**f,XH io&  bz+!@f,XHs&ͣH{*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \ cliprdr**.XH io&  bz!@.XH ZOC%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-**_H io&  bz7! @_H ZOClMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational }5@**e_H io&  bz!@e_H ZOC*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-_**`H io&  bz!@`H ZOC*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &-/**4:̷H io&  bz!f@4:̷H ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &--** UҷH io&  bzs!g@UҷH ZOC$ Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x-cxXEMD8A+= ReasonCode per **h>ty io&  bz!@>tyBbxMXXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`Mer`]/iL6tAA3=TransportProtocolName A=Port TCP= h**>ty io&  bz!!@>tyBbxMXXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`MeTCP= **rty io&  bz!!@rtyBbxMXXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`MeUDP= ****&ty io&  bz!!@&tyBbxMXXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational r`MeUDP= :Win**Tn!{ io&  bz!!@Tn!{bc%6RDP-Tcp#2**-Sq io&  bz! !@-Sq / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &s**-Sq io&  bz+!@-Sq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpgrfxper**-Sq io&  bzM!@-Sq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:63896***-Sq io&  bzM!@-Sq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD .UDP[192.168.23.170]:63897**@Vq io&  bz+!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&rdpinpto&**@Vq io&  bzW!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=<TCP: Reason Code: 5 (Unknown)**@Vq io&  bzW!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=<TCP: Reason Code: 5 (Unknown)**@Vq io&  bz!@@Vq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &`-B9**@Vq io&  bz#!@@Vq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP4 **Xq io&  bza!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&FMicrosoft::Windows::RDS::Telemetryemot**Xq io&  bz_!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&DMicrosoft::Windows::RDS::Graphicsv**Xq io&  bz'!@Xq / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational 7<=Lo**>[q io&  bz!@>[q / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**fq io&  bz7! @fq / DVg Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational P@o**fq io&  bz#!@fq=,JlG]/# Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational -r=UDP;**zq io&  bz!@zq / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &***q io&  bz!@*q / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**q io&  bz!@q / DVg$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**ۑq io&  bz'!@ۑq=,JlG]/#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \& rdpdr**=q io&  bzA!@=q=,JlG]/#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&&AUDIO_PLAYBACK_DVCOper**2q io&  bzM!@2q / DVg\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&2AUDIO_PLAYBACK_LOSSY_DVCce**)q io&  bzG! D@)q=,JlG]/#$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational BSRDP-Tcp#2^w/**nHw io&  bz!@nHw / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &/**ow io&  bzo!@ow=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&TMicrosoft::Windows::RDS::Geometry::v08.01**w io&  bzY!@w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&>Microsoft::Windows::RDS::Input@**>4w io&  bzk!@>4w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&PMicrosoft::Windows::RDS::DisplayControlmot**w io&  bz+!@w=,JlG]/#lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational \&cliprdrerv**Ԣ io&  bz!f@Ԣ / DVgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**Ԣ io&  bz!g@Ԣ / DVglMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**TH io&  bzI!@TH+ jNKp-ebMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:57939b**0TH io&  bz'! A@0TH+ jNKp-eb,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#3**XTH io&  bz! @XTH+ jNKp-eb+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם**| WH io&  bz!f@| WH+ jNKp-ebMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**| WH io&  bz!g@| WH+ jNKp-eb+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**eWH io&  bzI!@eWH Cb #Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:58159**WH io&  bz'! A@WH Cb #,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#4**WH io&  bz! @WH Cb #'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם**sWH io&  bz!f@sWH Cb #Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational &**sWH io&  bz!g@sWH Cb #'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational x**WH io&  bzI!@WH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational MD *TCP192.168.23.170:58160**(WH io&  bz'! A@(WH ZOC,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational kPte RDP-Tcp#5**A WH io&  bz! @A WH ZOCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS9IQB'% Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational ם io&  bzeDesktopS io&  bzrosoft::Windows::RDS::InputeTS/erational