ElfFile0ElfChnk..]LT\[Dl=f?mMF &**.>cA E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# >cAN\|~Aw|~A . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy***@/5A E'b& >V!!# 5AN\|~Aa|~Al/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**05A E'b& >V!!# 5AN\|~Aa|~Al0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**15A E'b& >V!!# 5AN\|~Aa|~Al1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**25A E'b& >V!!# 5AN\|~Aa|~Al2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** 35A E'b& >V!!# 5AN\|~Aa|~Al3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **45A E'b& >V!!# 5AN\|~Aa|~Al4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**55A E'b& >V!!# 5AN\|~Aa|~Al5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**65A E'b& >V!!# 5AN\|~Aa|~Al6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**075A E'b& >V!!# 5AN\|~Aa|~Al7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**85A E'b& >V!!# 5AN\|~Aa|~Al8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**95A E'b& >V!!# 5AN\|~Aa|~Al9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**:5A E'b& >V!!# 5AN\|~Aa|~Al: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**;5A E'b& >V!!# 5AN\|~Aa|~Al; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** <5A E'b& >V!!# 5AN\|~Aa|~Al< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **==A E'b& >V!!# =AN\|~Aa|~Al= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**>=A E'b& >V!!# =AN\|~Aa|~Al> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**?=A E'b& >V!!# =AN\|~Aa|~Al? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**@=A E'b& >V!!# =AN\|~Aa|~Al@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(A=A E'b& >V!!# =AN\|~Aa|~AlA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@B=A E'b& >V!!# =AN\|~Aa|~AlB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&lC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0C=A E'b& >V!!# =AN\|~Aa|~AlC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** D=A E'b& >V!!# =AN\|~Aa|~AlD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** E=A E'b& >V!!# =AN\|~Aa|~AlE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2w **F=A E'b& >V!!# =AN\|~Aa|~AlF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**G=A E'b& >V!!# =AN\|~Aa|~AlG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(H=A E'b& >V!!# =AN\|~Aa|~AlH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** IE4 D E'b& >V!!# E4 D=CgC I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **JE4 D E'b& >V!!# E4 D=CgC J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**KE4 D E'b& >V!!# E4 D=CgC K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**LE4 D E'b& >V!!# E4 D=CgC L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ME4 D E'b& >V!!# E4 D=CgC M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **NE4 D E'b& >V!!# E4 D=CgC N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**OE4 D E'b& >V!!# E4 D=CgC O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**PE4 D E'b& >V!!# E4 D=CgC P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0QE4 D E'b& >V!!# E4 D=CgC Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**RE4 D E'b& >V!!# E4 D=CgC R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**SE4 D E'b& >V!!# E4 D=CgC S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**TE4 D E'b& >V!!# E4 D=CgC T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**UE4 D E'b& >V!!# E4 D=CgC U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** VE4 D E'b& >V!!# E4 D=CgC V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **WE4 D E'b& >V!!# E4 D=CgC W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**XE4 D E'b& >V!!# E4 D=CgC X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**YE4 D E'b& >V!!# E4 D=CgC Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**ZE4 D E'b& >V!!# E4 D=CgC Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**([E4 D E'b& >V!!# E4 D=CgC [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@\E4 D E'b& >V!!# E4 D=CgC \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0]E4 D E'b& >V!!# E4 D=CgC ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** ^E4 D E'b& >V!!# E4 D=CgC ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** _E4 D E'b& >V!!# E4 D=CgC _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **`E4 D E'b& >V!!# E4 D=CgC ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**aE4 D E'b& >V!!# E4 D=CgC a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(bE4 D E'b& >V!!# E4 D=CgC b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** cXD E'b& >V!!# XD=CgC c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **dXD E'b& >V!!# XD=CgC d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**eXD E'b& >V!!# XD=CgC e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**fXD E'b& >V!!# XD=CgC f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** gXD E'b& >V!!# XD=CgC g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **hXD E'b& >V!!# XD=CgC h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**iXD E'b& >V!!# XD=CgC i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**jXD E'b& >V!!# XD=CgC j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0kXD E'b& >V!!# XD=CgC k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**lXD E'b& >V!!# XD=CgC l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**mXD E'b& >V!!# XD=CgC m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**nXD E'b& >V!!# XD=CgC n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**oXD E'b& >V!!# XD=CgC o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** pXD E'b& >V!!# XD=CgC p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **qXD E'b& >V!!# XD=CgC q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**rXD E'b& >V!!# XD=CgC r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**sXD E'b& >V!!# XD=CgC s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**tXD E'b& >V!!# XD=CgC t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(uXD E'b& >V!!# XD=CgC u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@vXD E'b& >V!!# XD=CgC v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0wXD E'b& >V!!# XD=CgC w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** xXD E'b& >V!!# XD=CgC x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** yXD E'b& >V!!# XD=CgC y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **zXD E'b& >V!!# XD=CgC z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**{XD E'b& >V!!# XD=CgC { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(|XD E'b& >V!!# XD=CgC | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** }wD E'b& >V!!# wD=CgC} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **~wD E'b& >V!!# wD=CgC~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(wD E'b& >V!!# wD=CgC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20owershell.ex E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk# |Dl=f?mMF=)&**vQm{F E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M **vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(vQm{F E'b& >V!!# vQm{FS@=Fj=F $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2=)6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892w0**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-f**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyD@**0q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttD0** q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(q{F E'b& >V!!# q{FS@=F3G=F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2=) ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyD@**0ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttD0** ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ev{F E'b& >V!!# ev{FS@=F4k=F  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2=) ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyD@**0hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttD0** hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(hu{[H E'b& >V!!# hu{[H@B2GmFB2G X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2=) ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** ]H E'b& >V!!# ]H@B2GzFB2G  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** ]H E'b& >V!!# ]H@B2GzFB2G  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M** ]H E'b& >V!!# ]H@B2GzFB2G  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h**  ]H E'b& >V!!# ]H@B2GzFB2G  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe ** ]H E'b& >V!!# ]H@B2GzFB2G  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyF@**0]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttF0** ]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** ]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkpC{$oDl=f?mMF&**]H E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M **]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(]H E'b& >V!!# ]H@B2GzFB2G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**d^H E'b& >V!!# d^H@B2GaB2G 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o** d^H E'b& >V!!# d^H@B2GaB2G 0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0!d^H E'b& >V!!# d^H@B2GaB2G 0! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**"d^H E'b& >V!!# d^H@B2GaB2G 0" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**#d^H E'b& >V!!# d^H@B2GaB2G 0# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**$d^H E'b& >V!!# d^H@B2GaB2G 0$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**%d^H E'b& >V!!# d^H@B2GaB2G 0% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** &d^H E'b& >V!!# d^H@B2GaB2G 0& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **'d^H E'b& >V!!# d^H@B2GaB2G 0' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**(d^H E'b& >V!!# d^H@B2GaB2G 0( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**)d^H E'b& >V!!# d^H@B2GaB2G 0) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h***d^H E'b& >V!!# d^H@B2GaB2G 0* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(+d^H E'b& >V!!# d^H@B2GaB2G 0+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@,d^H E'b& >V!!# d^H@B2GaB2G 0, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0-d^H E'b& >V!!# d^H@B2GaB2G 0- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** .d^H E'b& >V!!# d^H@B2GaB2G 0. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** /d^H E'b& >V!!# d^H@B2GaB2G 0/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **0d^H E'b& >V!!# d^H@B2GaB2G 00 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**1d^H E'b& >V!!# d^H@B2GaB2G 01 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(2d^H E'b& >V!!# d^H@B2GaB2G 02 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 39iJ E'b& >V!!# 9iJ+J+J 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **49iJ E'b& >V!!# 9iJ+J+J 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**59iJ E'b& >V!!# 9iJ+J+J 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**69iJ E'b& >V!!# 9iJ+J+J 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 79iJ E'b& >V!!# 9iJ+J+J 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **89iJ E'b& >V!!# 9iJ+J+J 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**99iJ E'b& >V!!# 9iJ+J+J 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**:9iJ E'b& >V!!# 9iJ+J+J : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0;!%:iJ E'b& >V!!# !%:iJ+J+J ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**<!%:iJ E'b& >V!!# !%:iJ+J+J < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**=!%:iJ E'b& >V!!# !%:iJ+J+J = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**>!%:iJ E'b& >V!!# !%:iJ+J+J > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**?!%:iJ E'b& >V!!# !%:iJ+J+J ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** @!%:iJ E'b& >V!!# !%:iJ+J+J @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **A!%:iJ E'b& >V!!# !%:iJ+J+J A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**B!%:iJ E'b& >V!!# !%:iJ+J+J B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**CL:iJ E'b& >V!!# L:iJ+J+J C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**DL:iJ E'b& >V!!# L:iJ+J+J D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(EL:iJ E'b& >V!!# L:iJ+J+J E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@FL:iJ E'b& >V!!# L:iJ+J+J F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0GL:iJ E'b& >V!!# L:iJ+J+J G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** HL:iJ E'b& >V!!# L:iJ+J+J H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** IL:iJ E'b& >V!!# L:iJ+J+J I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **JL:iJ E'b& >V!!# L:iJ+J+J J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**KL:iJ E'b& >V!!# L:iJ+J+J K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(LL:iJ E'b& >V!!# L:iJ+J+J L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** MViJ E'b& >V!!# ViJ+JǨ+J M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **NViJ E'b& >V!!# ViJ+JǨ+J N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**OViJ E'b& >V!!# ViJ+JǨ+J O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**PViJ E'b& >V!!# ViJ+JǨ+J P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** QViJ E'b& >V!!# ViJ+JǨ+J Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **RViJ E'b& >V!!# ViJ+JǨ+J R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**SViJ E'b& >V!!# ViJ+JǨ+J S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**TViJ E'b& >V!!# ViJ+JǨ+J T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0UViJ E'b& >V!!# ViJ+JǨ+J U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**VViJ E'b& >V!!# ViJ+JǨ+J V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**WViJ E'b& >V!!# ViJ+JǨ+J W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**XViJ E'b& >V!!# ViJ+JǨ+J X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**YViJ E'b& >V!!# ViJ+JǨ+J Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ZR@iJ E'b& >V!!# R@iJ+JǨ+J Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **[R@iJ E'b& >V!!# R@iJ+JǨ+J [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**\R@iJ E'b& >V!!# R@iJ+JǨ+J \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**]R@iJ E'b& >V!!# R@iJ+JǨ+J ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**^R@iJ E'b& >V!!# R@iJ+JǨ+J ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(_R@iJ E'b& >V!!# R@iJ+JǨ+J _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@`R@iJ E'b& >V!!# R@iJ+JǨ+J ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0aR@iJ E'b& >V!!# R@iJ+JǨ+J a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** bR@iJ E'b& >V!!# R@iJ+JǨ+J b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** cR@iJ E'b& >V!!# R@iJ+JǨ+J c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **dR@iJ E'b& >V!!# R@iJ+JǨ+J d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**eR@iJ E'b& >V!!# R@iJ+JǨ+J e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(fR@iJ E'b& >V!!# R@iJ+JǨ+J f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** g<,iJ E'b& >V!!# <,iJ+J+Jg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **h<,iJ E'b& >V!!# <,iJ+J+Jh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**i, -iJ E'b& >V!!# , -iJ+J+Ji ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**j, -iJ E'b& >V!!# , -iJ+J+Jj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** k, -iJ E'b& >V!!# , -iJ+J+Jk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **l, -iJ E'b& >V!!# , -iJ+J+Jl ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**m, -iJ E'b& >V!!# , -iJ+J+Jm ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**n, -iJ E'b& >V!!# , -iJ+J+Jn ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0o, -iJ E'b& >V!!# , -iJ+J+Jo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**p, -iJ E'b& >V!!# , -iJ+J+Jp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**q, -iJ E'b& >V!!# , -iJ+J+Jq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**r, -iJ E'b& >V!!# , -iJ+J+Jr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**s, -iJ E'b& >V!!# , -iJ+J+Js ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** t, -iJ E'b& >V!!# , -iJ+J+Jt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **u, -iJ E'b& >V!!# , -iJ+J+Ju ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**v, -iJ E'b& >V!!# , -iJ+J+Jv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**w, -iJ E'b& >V!!# , -iJ+J+Jw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**x, -iJ E'b& >V!!# , -iJ+J+Jx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(y, -iJ E'b& >V!!# , -iJ+J+Jy ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@z, -iJ E'b& >V!!# , -iJ+J+Jz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0{, -iJ E'b& >V!!# , -iJ+J+J{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** |, -iJ E'b& >V!!# , -iJ+J+J| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** }, -iJ E'b& >V!!# , -iJ+J+J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **~, -iJ E'b& >V!!# , -iJ+J+J~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**, -iJ E'b& >V!!# , -iJ+J+J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(, -iJ E'b& >V!!# , -iJ+J+J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** S~L E'b& >V!!# S~L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **S~L E'b& >V!!# S~L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**S~L E'b& >V!!# S~L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**S~L E'b& >V!!# S~L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** S~L E'b& >V!!# S~L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **WL E'b& >V!!# WL:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**WL E'b& >V!!# WL:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**WL E'b& >V!!# WL:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0shell.exe  E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk8xtX+j+Dl=f?mMFm-&**L E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-M **L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(L E'b& >V!!# L:Æ/L/L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@e4L E'b& >V!!# e4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2m-6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**e4L E'b& >V!!# e4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**e4L E'b& >V!!# e4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-M**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyJ@**0a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttJ0** a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(a4L E'b& >V!!# a4L`/Lh/L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2m- ten-US\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-M**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyJ@**0L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttJ0** L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(L E'b& >V!!# L:Æ/L/L\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**60O E'b&  >V!#60OP6Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational >/C>/C;WyP8DA-l= RegistryKey A)l= ErrorCode A%l=Message RZControl Panel\International\User ProfileThe system cannot find the file specified. al** Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2m- ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W **Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Z;O E'b& >V!!# Z;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789Mic0**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-c**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ذĤ **;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** ;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMnter ** ;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMnati **;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6i**;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0r**(;O E'b& >V!!# ;O1N0OU0O4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyl(** ^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2m- ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** ^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W **^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789Mic0**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-c**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ذĤ **^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyws-I@ernational+ E'b& >Vtional .ElfChnkqq֋ fDl=f?mMF&**^;O E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt** ^;O E'b& >V!!# ^;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ;O E'b& >V!!# ;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PML **;O E'b& >V!!# ;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**;O E'b& >V!!# ;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(;O E'b& >V!!# ;O1N0OU0O @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@I;O E'b& >V!!# I;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeatio@**I;O E'b& >V!!# I;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2o**I;O E'b& >V!!# I;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .o**I;O E'b& >V!!# I;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,n** I;O E'b& >V!!# I;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0icr ** I;O E'b& >V!!# I;O1N0OO0Od  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0l** M;O E'b& >V!!# M;O1N0OO0Od  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i** M;O E'b& >V!!# M;O1N0OO0Od  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0 M;O E'b& >V!!# M;O1N0OO0Od  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789+:Wc0** M;O E'b& >V!!# M;O1N0OO0Od  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .o**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rsh **M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl.(**@M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&dC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy89@**0M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMa4 ** M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PML **M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(M;O E'b& >V!!# M;O1N0OO0Od ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**!y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **#y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m**$y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0.**%y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $h**0&y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789exe0**'y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**(y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**)y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0***y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** +y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rsh **,y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**-y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**.y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**/y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(0y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl.(**@1y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&DC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy89@**02y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 3y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 4y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PML **5y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(7y} ΝQ E'b& >V!!# y} ΝQ-.>Q6.>QD7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 8xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 08 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-UST C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 09 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** <xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **=xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m**>xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0.**?xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $h**0@xTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789exe0**AxTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**BxTѝQ E'b& >V!!# xTѝQ-.>Q6.>QT 0B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**CѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**DѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,f** EѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **FѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1f**GѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+f**HѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /f**IѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(JѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyWi(**@KѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&T C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyynal/@**0LѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttnal 0** MѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMOper ** NѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMatio **OѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**PѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(QѝQ E'b& >V!!# ѝQ-.>Q6.>QT 0Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** RaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **SaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**TaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**UaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** VaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **WaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **XaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**YaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $i**0ZaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>QZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789s-In0**[aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**\aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**]aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .w**^aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,f** _aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **`aJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Q` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1f**aaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qa ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+f**baJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /f**caJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(daJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qd ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyWi(**@eaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qe ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyynal/@**0faJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qf ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttnal 0** gaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMOper ** haJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMatio **iaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qi ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**jaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(kaJiҝQ E'b& >V!!# aJiҝQ-.>Qq.>Qk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** l:iT E'b& >V!!# :iTӂ٭S٭S |l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **m:iT E'b& >V!!# :iTӂ٭S٭S |m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**n:iT E'b& >V!!# :iTӂ٭S٭S |n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**o:iT E'b& >V!!# :iTӂ٭S٭S |o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** p:iT E'b& >V!!# :iTӂ٭S٭S |p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **q:iT E'b& >V!!# :iTӂ٭S٭S |q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 t E'b& >V1.0\powershell.exe  dddd, MMMM d, yyyyws-I@ernational+ E'b& >Vtional .ElfChnkrrp'Ov |Dl=f?mMF3&**r:iT E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# :iTӂ٭S٭S |r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m:**s:iT E'b& >V!!# :iTӂ٭S٭S |s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0tiT E'b& >V!!# iTӂ٭S٭S |t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**uiT E'b& >V!!# iTӂ٭S٭S |u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**viT E'b& >V!!# iTӂ٭S٭S |v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**wiT E'b& >V!!# iTӂ٭S٭S |w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**xiT E'b& >V!!# iTӂ٭S٭S |x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** yiT E'b& >V!!# iTӂ٭S٭S |y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W **ziT E'b& >V!!# iTӂ٭S٭S |z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1W**{iT E'b& >V!!# iTӂ٭S٭S |{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+W**|iT E'b& >V!!# iTӂ٭S٭S || ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /W**}iT E'b& >V!!# iTӂ٭S٭S |} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :o**(~iT E'b& >V!!# iTӂ٭S٭S |~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyydo(**@iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy+:Wc@**0iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttosof0** iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM.?w ** iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMMicr **iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6r**iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0r**(iT E'b& >V!!# iTӂ٭S٭S | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyi(**@@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ236Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** @T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@@T E'b& >V!!# @Tӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyy} @**0hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tty} 0** hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMQ ** hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(hT E'b& >V!!# hTӂ٭S٭S, , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyxT@**0rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttxT0** rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMQ ** rGT E'b& >V!!# rGTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **GT E'b& >V!!# GTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**GT E'b& >V!!# GTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(GT E'b& >V!!# GTӂ٭S٭S(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 ** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w**  V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. ** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**( V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@ V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyaJi@**0 V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttaJi0**  V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMQ **  V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& ** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( V E'b& >V!!#  VQ -U,Z -U`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** }_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** }_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** }_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :hl.exe 0 E'b& >V!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkYY5Dl=f?mMF&**}_Z V E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyys**@}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&LC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** }_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** }_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(}_Z V E'b& >V!!# }_Z VQ -U[S -UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&PC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(e V E'b& >V!!# e VQ -UlZ -UP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**01i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789h0**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&D C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**01i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** 1i\X E'b& >V!!# 1i\X"PX4"PXD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(!1i\X E'b& >V!!# 1i\X"PX4"PXD ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tD C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** "R\k\X E'b& >V!!# R\k\X"PXH"PX t" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **#R\k\X E'b& >V!!# R\k\X"PXH"PX t# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$R\k\X E'b& >V!!# R\k\X"PXH"PX t$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%R\k\X E'b& >V!!# R\k\X"PXH"PX t% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &R\k\X E'b& >V!!# R\k\X"PXH"PX t& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **'R\k\X E'b& >V!!# R\k\X"PXH"PX t' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(R\k\X E'b& >V!!# R\k\X"PXH"PX t( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**)R\k\X E'b& >V!!# R\k\X"PXH"PX t) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0*R\k\X E'b& >V!!# R\k\X"PXH"PX t* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789G0**+R\k\X E'b& >V!!# R\k\X"PXH"PX t+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**,R\k\X E'b& >V!!# R\k\X"PXH"PX t, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**-R\k\X E'b& >V!!# R\k\X"PXH"PX t- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**.R\k\X E'b& >V!!# R\k\X"PXH"PX t. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** /R\k\X E'b& >V!!# R\k\X"PXH"PX t/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **0R\k\X E'b& >V!!# R\k\X"PXH"PX t0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**1R\k\X E'b& >V!!# R\k\X"PXH"PX t1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**2R\k\X E'b& >V!!# R\k\X"PXH"PX t2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**3R\k\X E'b& >V!!# R\k\X"PXH"PX t3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(4R\k\X E'b& >V!!# R\k\X"PXH"PX t4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@5R\k\X E'b& >V!!# R\k\X"PXH"PX t5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**06R\k\X E'b& >V!!# R\k\X"PXH"PX t6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 7R\k\X E'b& >V!!# R\k\X"PXH"PX t7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 8R\k\X E'b& >V!!# R\k\X"PXH"PX t8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **9R\k\X E'b& >V!!# R\k\X"PXH"PX t9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**:R\k\X E'b& >V!!# R\k\X"PXH"PX t: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(;R\k\X E'b& >V!!# R\k\X"PXH"PX t; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** < l\X E'b& >V!!#  l\X"PXs"PX< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **= l\X E'b& >V!!#  l\X"PXs"PX= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**> l\X E'b& >V!!#  l\X"PXs"PX> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**? l\X E'b& >V!!#  l\X"PXs"PX? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @ l\X E'b& >V!!#  l\X"PXs"PX@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **A l\X E'b& >V!!#  l\X"PXs"PXA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**B l\X E'b& >V!!#  l\X"PXs"PXB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**C l\X E'b& >V!!#  l\X"PXs"PXC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0D l\X E'b& >V!!#  l\X"PXs"PXD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789 0**E l\X E'b& >V!!#  l\X"PXs"PXE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q- **F l\X E'b& >V!!#  l\X"PXs"PXF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **G l\X E'b& >V!!#  l\X"PXs"PXG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**H l\X E'b& >V!!#  l\X"PXs"PXH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** I l\X E'b& >V!!#  l\X"PXs"PXI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **J l\X E'b& >V!!#  l\X"PXs"PXJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**K l\X E'b& >V!!#  l\X"PXs"PXK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**L l\X E'b& >V!!#  l\X"PXs"PXL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**M l\X E'b& >V!!#  l\X"PXs"PXM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(N l\X E'b& >V!!#  l\X"PXs"PXN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@O l\X E'b& >V!!#  l\X"PXs"PXO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0P l\X E'b& >V!!#  l\X"PXs"PXP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Q l\X E'b& >V!!#  l\X"PXs"PXQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** R l\X E'b& >V!!#  l\X"PXs"PXR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **S l\X E'b& >V!!#  l\X"PXs"PXS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**T l\X E'b& >V!!#  l\X"PXs"PXT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(U l\X E'b& >V!!#  l\X"PXs"PXU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Vnb+Z E'b& >V!!# nb+Z*Z8*Z V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Wnb+Z E'b& >V!!# nb+Z*Z8*Z W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Xnb+Z E'b& >V!!# nb+Z*Z8*Z X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ynb+Z E'b& >V!!# nb+Z*Z8*Z Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,>V E'b& >VMicrosoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkZZxGq% Dl=f?mMF8&**Znb+Z E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# nb+Z*Z8*Z Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy**[nb+Z E'b& >V!!# nb+Z*Z8*Z [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**\nb+Z E'b& >V!!# nb+Z*Z8*Z \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**]nb+Z E'b& >V!!# nb+Z*Z8*Z ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0^nb+Z E'b& >V!!# nb+Z*Z8*Z ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**_nb+Z E'b& >V!!# nb+Z*Z8*Z _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**`nb+Z E'b& >V!!# nb+Z*Z8*Z ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**anb+Z E'b& >V!!# nb+Z*Z8*Z a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**bnb+Z E'b& >V!!# nb+Z*Z8*Z b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** cnb+Z E'b& >V!!# nb+Z*Z8*Z c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **dnb+Z E'b& >V!!# nb+Z*Z8*Z d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**enb+Z E'b& >V!!# nb+Z*Z8*Z e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**fnb+Z E'b& >V!!# nb+Z*Z8*Z f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**gnb+Z E'b& >V!!# nb+Z*Z8*Z g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(hnb+Z E'b& >V!!# nb+Z*Z8*Z h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@inb+Z E'b& >V!!# nb+Z*Z8*Z i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0jnb+Z E'b& >V!!# nb+Z*Z8*Z j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** knb+Z E'b& >V!!# nb+Z*Z8*Z k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** lnb+Z E'b& >V!!# nb+Z*Z8*Z l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **mnb+Z E'b& >V!!# nb+Z*Z8*Z m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**nnb+Z E'b& >V!!# nb+Z*Z8*Z n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(onb+Z E'b& >V!!# nb+Z*Z8*Z o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@pӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ286Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**qӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**rӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**sӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** tӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **uӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**vӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**wӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0xӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**yӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**zӪ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**{Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**|Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** }Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **~Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\ ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Ӫ-Z E'b& >V!!# Ӫ-Z*Zk*Z\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(T].Z E'b& >V!!# T].Z*ZS*Zh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(FPt\ E'b& >V!!# FPt\"Z8>\`8>\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** *t\ E'b& >V!!# *t\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ***t\ E'b& >V!!# *t\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2***t\ E'b& >V!!# *t\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+wowerShell\v1 E'b& >VE'b!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkAA~($qDl=f?mMF&**ƌt\ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&PC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ƌt\ E'b& >V!!# ƌt\"Z8>\`8>\PX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(nt\ E'b& >V!!# nt\"Z8>\`8>\8  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Q^ E'b& >V!!# Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** {:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**({:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0{:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** {:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** {:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** {:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** {:Q^ E'b& >V!!# {:Q^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( aQ^ E'b& >V!!# aQ^! ^e7^  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ļ^ E'b& >V!!# ļ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 ^ E'b& >V!!# ^! ^^`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** !^ E'b& >V!!# ^! ^^` ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** "^ E'b& >V!!# ^! ^^` " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **#^ E'b& >V!!# ^! ^^` # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**$^ E'b& >V!!# ^! ^^` $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(%^ E'b& >V!!# ^! ^^` % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** &Ze^ E'b& >V!!# Ze^! ^^& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **'Ze^ E'b& >V!!# Ze^! ^^' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(Ze^ E'b& >V!!# Ze^! ^^( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**)Ze^ E'b& >V!!# Ze^! ^^) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** *Ze^ E'b& >V!!# Ze^! ^^* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **+Ze^ E'b& >V!!# Ze^! ^^+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,Ze^ E'b& >V!!# Ze^! ^^, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**-Ze^ E'b& >V!!# Ze^! ^^- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0.Ze^ E'b& >V!!# Ze^! ^^. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**/Ze^ E'b& >V!!# Ze^! ^^/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**0Ze^ E'b& >V!!# Ze^! ^^0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1[e^ E'b& >V!!# [e^! ^^1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2[e^ E'b& >V!!# [e^! ^^2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3[e^ E'b& >V!!# [e^! ^^3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **4[e^ E'b& >V!!# [e^! ^^4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**5[e^ E'b& >V!!# [e^! ^^5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**6[e^ E'b& >V!!# [e^! ^^6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**7[e^ E'b& >V!!# [e^! ^^7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(8[e^ E'b& >V!!# [e^! ^^8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@9[e^ E'b& >V!!# [e^! ^^9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0:[e^ E'b& >V!!# [e^! ^^: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ;[e^ E'b& >V!!# [e^! ^^; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** <[e^ E'b& >V!!# [e^! ^^< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **=[e^ E'b& >V!!# [e^! ^^= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**>[e^ E'b& >V!!# [e^! ^^> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(?[e^ E'b& >V!!# [e^! ^^? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** @Lr_;a E'b& >V!!# Lr_;aNA~` B~`@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ALr_;a E'b& >V!!# Lr_;aNA~` B~`A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 > E'b& >V 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkBBpΠDl=f?mMF5<&**BLr_;a E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# Lr_;aNA~` B~`B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**CLr_;a E'b& >V!!# Lr_;aNA~` B~`C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** DLr_;a E'b& >V!!# Lr_;aNA~` B~`D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ELr_;a E'b& >V!!# Lr_;aNA~` B~`E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**FLr_;a E'b& >V!!# Lr_;aNA~` B~`F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**GLr_;a E'b& >V!!# Lr_;aNA~` B~`G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0HLr_;a E'b& >V!!# Lr_;aNA~` B~`H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**ILr_;a E'b& >V!!# Lr_;aNA~` B~`I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**JLr_;a E'b& >V!!# Lr_;aNA~` B~`J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**KLr_;a E'b& >V!!# Lr_;aNA~` B~`K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**LLr_;a E'b& >V!!# Lr_;aNA~` B~`L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** MLr_;a E'b& >V!!# Lr_;aNA~` B~`M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **NLr_;a E'b& >V!!# Lr_;aNA~` B~`N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**OLr_;a E'b& >V!!# Lr_;aNA~` B~`O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**PLr_;a E'b& >V!!# Lr_;aNA~` B~`P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**QLr_;a E'b& >V!!# Lr_;aNA~` B~`Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(RLr_;a E'b& >V!!# Lr_;aNA~` B~`R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@SLr_;a E'b& >V!!# Lr_;aNA~` B~`S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0TLr_;a E'b& >V!!# Lr_;aNA~` B~`T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** ULr_;a E'b& >V!!# Lr_;aNA~` B~`U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** VLr_;a E'b& >V!!# Lr_;aNA~` B~`V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **WLr_;a E'b& >V!!# Lr_;aNA~` B~`W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**XLr_;a E'b& >V!!# Lr_;aNA~` B~`X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(YLr_;a E'b& >V!!# Lr_;aNA~` B~`Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@Z?0;a E'b& >V!!# ?0;aNA~`eA~` Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25<6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**[?0;a E'b& >V!!# ?0;aNA~`eA~` [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\?0;a E'b& >V!!# ?0;aNA~`eA~` \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]?0;a E'b& >V!!# ?0;aNA~`eA~` ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^?0;a E'b& >V!!# ?0;aNA~`eA~` ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **_?0;a E'b& >V!!# ?0;aNA~`eA~` _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**`?0;a E'b& >V!!# ?0;aNA~`eA~` ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**a?0;a E'b& >V!!# ?0;aNA~`eA~` a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0b?0;a E'b& >V!!# ?0;aNA~`eA~` b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**c;a E'b& >V!!# ;aNA~`eA~` c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**d;a E'b& >V!!# ;aNA~`eA~` d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**e;a E'b& >V!!# ;aNA~`eA~` e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**f;a E'b& >V!!# ;aNA~`eA~` f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** g;a E'b& >V!!# ;aNA~`eA~` g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **h;a E'b& >V!!# ;aNA~`eA~` h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**i;a E'b& >V!!# ;aNA~`eA~` i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**j;a E'b& >V!!# ;aNA~`eA~` j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**k;a E'b& >V!!# ;aNA~`eA~` k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(l;a E'b& >V!!# ;aNA~`eA~` l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@m;a E'b& >V!!# ;aNA~`eA~` m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0n;a E'b& >V!!# ;aNA~`eA~` n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** o;a E'b& >V!!# ;aNA~`eA~` o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** p;a E'b& >V!!# ;aNA~`eA~` p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **q;a E'b& >V!!# ;aNA~`eA~` q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**r;a E'b& >V!!# ;aNA~`eA~` r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(s;a E'b& >V!!# ;aNA~`eA~` s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** tĞU;a E'b& >V!!# ĞU;aNA~`8!B~`ht ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-UShC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **uĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**vĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** xĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **yĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hy ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**zĞU;a E'b& >V!!# ĞU;aNA~`8!B~`hz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**{ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0|ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**}ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**~ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&hC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ĞU;a E'b& >V!!# ĞU;aNA~`8!B~`h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 3c E'b& >V!!# 3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**]3c E'b& >V!!# ]3cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**013c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** 13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**013c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** 13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**13c E'b& >V!!# 13cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(5#4c E'b& >V!!# 5#4cPc:Pc@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-USHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow owerShell\v1 E'b& >VE'b!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk))^1Dl=f?mMF"&**s1} c E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@s1} c E'b& >V!!# s1} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&HC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(X} c E'b& >V!!# X} cPcsPcH  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@ % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2"6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 ** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . ** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , **  % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio ** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0 % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  % c E'b& >V!!#  % cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 3% c E'b& >V!!# 3% cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **3% c E'b& >V!!# 3% cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**3% c E'b& >V!!# 3% cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(3% c E'b& >V!!# 3% cPcPc4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789q0**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ge E'b& >V!!# getY}ecY}e l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ je E'b& >V!!# jetY}eY}e, l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 je E'b& >V!!# jetY}eY}e, l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  je E'b& >V!!# jetY}eY}e, l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **  je E'b& >V!!# jetY}eY}e, l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** je E'b& >V!!# jetY}eY}e, l  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(je E'b& >V!!# jetY}eY}e, l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**03&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**3&je E'b& >V!!# 3&jetY}eY}e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** 3&je E'b& >V!!# 3&jetY}eY}e  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**!3&je E'b& >V!!# 3&jetY}eY}e! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**("3&je E'b& >V!!# 3&jetY}eY}e" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@#3&je E'b& >V!!# 3&jetY}eY}e# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0$3&je E'b& >V!!# 3&jetY}eY}e$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** %3&je E'b& >V!!# 3&jetY}eY}e% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** &3&je E'b& >V!!# 3&jetY}eY}e& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **'3&je E'b& >V!!# 3&jetY}eY}e' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**(3&je E'b& >V!!# 3&jetY}eY}e( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**()3&je E'b& >V!!# 3&jetY}eY}e) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk**pRDl=f?mMF& ***2f*Fh E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 2f*Fhhdh* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿W0$DD EventDataA=loData= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe**(+2f*Fh E'b& >V!!# 2f*Fhhdh+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . .Ŀ[9TDA)l= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2r(**,2f*Fh E'b& >V!!# 2f*Fhhdh, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**-2f*Fh E'b& >V!!# 2f*Fhhdh- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r** .2f*Fh E'b& >V!!# 2f*Fhhdh. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0?w **/2f*Fh E'b& >V!!# 2f*Fhhdh/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0I**02f*Fh E'b& >V!!# 2f*Fhhdh0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**12f*Fh E'b& >V!!# 2f*Fhhdh1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $c**022f*Fh E'b& >V!!# 2f*Fhhdh2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ft-W0**32f*Fh E'b& >V!!# 2f*Fhhdh3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-W**42f*Fh E'b& >V!!# 2f*Fhhdh4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2W**52f*Fh E'b& >V!!# 2f*Fhhdh5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .c**62f*Fh E'b& >V!!# 2f*Fhhdh6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,W** 72f*Fh E'b& >V!!# 2f*Fhhdh7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **82f*Fh E'b& >V!!# 2f*Fhhdh8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**92f*Fh E'b& >V!!# 2f*Fhhdh9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**:2f*Fh E'b& >V!!# 2f*Fhhdh: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**;2f*Fh E'b& >V!!# 2f*Fhhdh; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(<2f*Fh E'b& >V!!# 2f*Fhhdh< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@=2f*Fh E'b& >V!!# 2f*Fhhdh= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0>2f*Fh E'b& >V!!# 2f*Fhhdh> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** ?2f*Fh E'b& >V!!# 2f*Fhhdh? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** @2f*Fh E'b& >V!!# 2f*Fhhdh@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **A2f*Fh E'b& >V!!# 2f*FhhdhA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**B2f*Fh E'b& >V!!# 2f*FhhdhB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(C2f*Fh E'b& >V!!# 2f*FhhdhC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** D,Fh E'b& >V!!# ,Fhh:hP tD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **E,Fh E'b& >V!!# ,Fhh:hP tE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**F,Fh E'b& >V!!# ,Fhh:hP tF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**G,Fh E'b& >V!!# ,Fhh:hP tG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** H,Fh E'b& >V!!# ,Fhh:hP tH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **I,Fh E'b& >V!!# ,Fhh:hP tI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**J,Fh E'b& >V!!# ,Fhh:hP tJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**K,Fh E'b& >V!!# ,Fhh:hP tK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0L,Fh E'b& >V!!# ,Fhh:hP tL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**M,Fh E'b& >V!!# ,Fhh:hP tM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**N,Fh E'b& >V!!# ,Fhh:hP tN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**O,Fh E'b& >V!!# ,Fhh:hP tO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**P,Fh E'b& >V!!# ,Fhh:hP tP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** Q,Fh E'b& >V!!# ,Fhh:hP tQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **R,Fh E'b& >V!!# ,Fhh:hP tR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**S,Fh E'b& >V!!# ,Fhh:hP tS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**T,Fh E'b& >V!!# ,Fhh:hP tT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**U,Fh E'b& >V!!# ,Fhh:hP tU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(V,Fh E'b& >V!!# ,Fhh:hP tV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@W,Fh E'b& >V!!# ,Fhh:hP tW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&P C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0X,Fh E'b& >V!!# ,Fhh:hP tX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** Y,Fh E'b& >V!!# ,Fhh:hP tY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** Z,Fh E'b& >V!!# ,Fhh:hP tZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **[,Fh E'b& >V!!# ,Fhh:hP t[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**\,Fh E'b& >V!!# ,Fhh:hP t\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(],Fh E'b& >V!!# ,Fhh:hP t] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ^kE-Fh E'b& >V!!# kE-Fhhhx ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **_kE-Fh E'b& >V!!# kE-Fhhhx _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**`kE-Fh E'b& >V!!# kE-Fhhhx ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**akE-Fh E'b& >V!!# kE-Fhhhx a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** bkE-Fh E'b& >V!!# kE-Fhhhx b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ckE-Fh E'b& >V!!# kE-Fhhhx c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**dkE-Fh E'b& >V!!# kE-Fhhhx d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**ekE-Fh E'b& >V!!# kE-Fhhhx e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0fkE-Fh E'b& >V!!# kE-Fhhhx f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**gkE-Fh E'b& >V!!# kE-Fhhhx g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**hkE-Fh E'b& >V!!# kE-Fhhhx h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ikE-Fh E'b& >V!!# kE-Fhhhx i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**jkE-Fh E'b& >V!!# kE-Fhhhx j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** kkE-Fh E'b& >V!!# kE-Fhhhx k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **lkE-Fh E'b& >V!!# kE-Fhhhx l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**mkE-Fh E'b& >V!!# kE-Fhhhx m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**nkE-Fh E'b& >V!!# kE-Fhhhx n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**okE-Fh E'b& >V!!# kE-Fhhhx o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(pkE-Fh E'b& >V!!# kE-Fhhhx p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@qkE-Fh E'b& >V!!# kE-Fhhhx q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&x C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0rkE-Fh E'b& >V!!# kE-Fhhhx r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** skE-Fh E'b& >V!!# kE-Fhhhx s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** tkE-Fh E'b& >V!!# kE-Fhhhx t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **ukE-Fh E'b& >V!!# kE-Fhhhx u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**vkE-Fh E'b& >V!!# kE-Fhhhx v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(wkE-Fh E'b& >V!!# kE-Fhhhx w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** xNj E'b& >V!!# NjB{cjG{cj x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **yNj E'b& >V!!# NjB{cjG{cj y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**zNj E'b& >V!!# NjB{cjG{cj z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**{Nj E'b& >V!!# NjB{cjG{cj { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** |Nj E'b& >V!!# NjB{cjG{cj | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **}Nj E'b& >V!!# NjB{cjG{cj } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**~Nj E'b& >V!!# NjB{cjG{cj ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Nj E'b& >V!!# NjB{cjG{cj  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**03Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .hl\v1.0\power E'b& >VE'b!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkfջj"Dl=f?mMF%'&**3Oj E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l.** 3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l **3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1i**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+i**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyal(**@3Oj E'b& >V!!# 3OjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyt-Wi@**0Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tttern0** Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMndow ** Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMs-In **Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6n**Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0n**(Qj E'b& >V!!# QjB{cjG{cj T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyo(**@[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%'6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** [?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892f*0**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-***[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2***[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** [?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**([?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** [?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** [?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**[?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**([?j E'b& >V!!# [?jB{cjG{cj   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**08l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789,0**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-,**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2,**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**08l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(8l E'b& >V!!# 8ljxlxxl8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789kE-0**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q--**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2-**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(l E'b& >V!!# ljxlxl D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** "{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789N0**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** "{l E'b& >V!!# "{ljxlxlp   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** "{l E'b& >V!!# "{ljxlxlp   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y** "{l E'b& >V!!# "{ljxlxlp   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( "{l E'b& >V!!# "{ljxlxlp   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ "{l E'b& >V!!# "{ljxlxlp   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&p C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** "{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** "{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **"{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk0ktZUDl=f?mMF &**"{l E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0l.**("{l E'b& >V!!# "{ljxlxlp  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**g`o E'b& >V!!# g`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0呺`o E'b& >V!!# 呺`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**呺`o E'b& >V!!# 呺`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**呺`o E'b& >V!!# 呺`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**呺`o E'b& >V!!# 呺`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W** 呺`o E'b& >V!!# 呺`oIzoIzo$ x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** !呺`o E'b& >V!!# 呺`oIzoIzo$ x ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **"呺`o E'b& >V!!# 呺`oIzoIzo$ x " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**#呺`o E'b& >V!!# 呺`oIzoIzo$ x # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**$呺`o E'b& >V!!# 呺`oIzoIzo$ x $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**%呺`o E'b& >V!!# 呺`oIzoIzo$ x % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(&呺`o E'b& >V!!# 呺`oIzoIzo$ x & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@'呺`o E'b& >V!!# 呺`oIzoIzo$ x ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0(呺`o E'b& >V!!# 呺`oIzoIzo$ x ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** )呺`o E'b& >V!!# 呺`oIzoIzo$ x ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** *呺`o E'b& >V!!# 呺`oIzoIzo$ x * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2* **+呺`o E'b& >V!!# 呺`oIzoIzo$ x + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,呺`o E'b& >V!!# 呺`oIzoIzo$ x , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(-呺`o E'b& >V!!# 呺`oIzoIzo$ x - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** .vAռ`o E'b& >V!!# vAռ`oIzo Jzo. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **/vAռ`o E'b& >V!!# vAռ`oIzo Jzo/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0vAռ`o E'b& >V!!# vAռ`oIzo Jzo0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**1vAռ`o E'b& >V!!# vAռ`oIzo Jzo1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2vAռ`o E'b& >V!!# vAռ`oIzo Jzo2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **3vAռ`o E'b& >V!!# vAռ`oIzo Jzo3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**4vAռ`o E'b& >V!!# vAռ`oIzo Jzo4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**5vAռ`o E'b& >V!!# vAռ`oIzo Jzo5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**06vAռ`o E'b& >V!!# vAռ`oIzo Jzo6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**7vAռ`o E'b& >V!!# vAռ`oIzo Jzo7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**8vAռ`o E'b& >V!!# vAռ`oIzo Jzo8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**9vAռ`o E'b& >V!!# vAռ`oIzo Jzo9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**:vAռ`o E'b& >V!!# vAռ`oIzo Jzo: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ;vAռ`o E'b& >V!!# vAռ`oIzo Jzo; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **<vAռ`o E'b& >V!!# vAռ`oIzo Jzo< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**=vAռ`o E'b& >V!!# vAռ`oIzo Jzo= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**>vAռ`o E'b& >V!!# vAռ`oIzo Jzo> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**?vAռ`o E'b& >V!!# vAռ`oIzo Jzo? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(@vAռ`o E'b& >V!!# vAռ`oIzo Jzo@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@AvAռ`o E'b& >V!!# vAռ`oIzo JzoA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0BvAռ`o E'b& >V!!# vAռ`oIzo JzoB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** CvAռ`o E'b& >V!!# vAռ`oIzo JzoC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** DvAռ`o E'b& >V!!# vAռ`oIzo JzoD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2, **EvAռ`o E'b& >V!!# vAռ`oIzo JzoE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**FvAռ`o E'b& >V!!# vAռ`oIzo JzoF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(GvAռ`o E'b& >V!!# vAռ`oIzo JzoG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** H֌`o E'b& >V!!# ֌`oIzoIzoH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **I֌`o E'b& >V!!# ֌`oIzoIzoI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**J֌`o E'b& >V!!# ֌`oIzoIzoJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**K֌`o E'b& >V!!# ֌`oIzoIzoK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L֌`o E'b& >V!!# ֌`oIzoIzoL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **M֌`o E'b& >V!!# ֌`oIzoIzoM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**N֌`o E'b& >V!!# ֌`oIzoIzoN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**O֌`o E'b& >V!!# ֌`oIzoIzoO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0P֌`o E'b& >V!!# ֌`oIzoIzoP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**Q֌`o E'b& >V!!# ֌`oIzoIzoQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**R֌`o E'b& >V!!# ֌`oIzoIzoR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**S֌`o E'b& >V!!# ֌`oIzoIzoS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**T֌`o E'b& >V!!# ֌`oIzoIzoT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** U֌`o E'b& >V!!# ֌`oIzoIzoU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **V֌`o E'b& >V!!# ֌`oIzoIzoV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**W֌`o E'b& >V!!# ֌`oIzoIzoW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**X֌`o E'b& >V!!# ֌`oIzoIzoX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**Y֌`o E'b& >V!!# ֌`oIzoIzoY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(Z֌`o E'b& >V!!# ֌`oIzoIzoZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@[֌`o E'b& >V!!# ֌`oIzoIzo[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0\֌`o E'b& >V!!# ֌`oIzoIzo\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** ]֌`o E'b& >V!!# ֌`oIzoIzo] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** ^֌`o E'b& >V!!# ֌`oIzoIzo^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2- **_֌`o E'b& >V!!# ֌`oIzoIzo_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**`֌`o E'b& >V!!# ֌`oIzoIzo` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(a֌`o E'b& >V!!# ֌`oIzoIzoa ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** b?p E'b& >V!!# ?p2NoYNob ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **c?p E'b& >V!!# ?p2NoYNoc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**d?p E'b& >V!!# ?p2NoYNod ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**e?p E'b& >V!!# ?p2NoYNoe ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** f?p E'b& >V!!# ?p2NoYNof ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **g?p E'b& >V!!# ?p2NoYNog ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**h?p E'b& >V!!# ?p2NoYNoh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**i?p E'b& >V!!# ?p2NoYNoi ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0j?p E'b& >V!!# ?p2NoYNoj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**k?p E'b& >V!!# ?p2NoYNok ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**l?p E'b& >V!!# ?p2NoYNol ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**m?p E'b& >V!!# ?p2NoYNom ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**n?p E'b& >V!!# ?p2NoYNon ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** o?p E'b& >V!!# ?p2NoYNoo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **p?p E'b& >V!!# ?p2NoYNop ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**q?p E'b& >V!!# ?p2NoYNoq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**r?p E'b& >V!!# ?p2NoYNor ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**s?p E'b& >V!!# ?p2NoYNos ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(t?p E'b& >V!!# ?p2NoYNot ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@u?p E'b& >V!!# ?p2NoYNou ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0v?p E'b& >V!!# ?p2NoYNov ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** w?p E'b& >V!!# ?p2NoYNow ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** x?p E'b& >V!!# ?p2NoYNox ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **y?p E'b& >V!!# ?p2NoYNoy ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**z?p E'b& >V!!# ?p2NoYNoz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**({?p E'b& >V!!# ?p2NoYNo{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** |Yp E'b& >V!!# Yp2NoYNo | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **}Yp E'b& >V!!# Yp2NoYNo } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**~Yp E'b& >V!!# Yp2NoYNo ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0owershell.ex E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk*y@ DDl=f?mMFU+&**Yp E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2l.**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892*0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**((\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyo@**0(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tto0** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**((\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**00 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892,0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyo@**00 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tto0** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892-0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**( }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyp@**0 }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttp0**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& **  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**05 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyp@**05 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttp0** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b&  E'b& >VV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk0XlzjDl=f?mMF&**5 }r E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM.**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(Yp E'b& >V!!# Yp2NoYNo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892*0**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**((\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyo@**0(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tto0** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** (\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**(\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**((\p E'b& >V!!# (\p2NoYNo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**00 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892,0**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyo@**00 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tto0** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** 0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(0 }r E'b& >V!!# 0 }r)G#?rs#?r@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892-0** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**( }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyp@**0 }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttp0**  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& **  }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( }r E'b& >V!!#  }r)G#?rtM#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**05 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyp@**05 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttp0** 5 }r E'b& >V!!# 5 }r)G#?rTs#?r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b&  E'b& >VV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .