ElfFileg~ElfChnk!!p H]daDl=f?mMF3&** E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m:** E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** / E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W **/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1W**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+W**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /W**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :o**(/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyydo(**@/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy+:Wc@**0/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttosof0** / E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM.?w ** / E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMMicr **/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6r**/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0r**(/ E'b& >V!!# /k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyi(**@^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ236Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy(7@**0^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt(70** ^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(^T E'b& >V!!# ^Tk.. 4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyՂ;:@**0m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttՂ;:0** m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(m E'b& >V!!# mk.!.  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** $#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** $#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** $#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**($#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@ $#: E'b& >V!!# $#:s s   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy+;@**0 $#: E'b& >V!!# $#:s s   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt+;0**  $#: E'b& >V!!# $#:s s   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **  $#: E'b& >V!!# $#:s s   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& ** $#: E'b& >V!!# $#:s s   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**$#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**($#: E'b& >V!!# $#:s s  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.** wY$: E'b& >V!!# wY$:s$ s@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**!wY$: E'b& >V!!# wY$:s$ s@ ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :hl.exe 0 E'b& >V!# wY$:s$ s@ " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk""PG4Dl=f?mMF&**"wY$: E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# wY$:s$ s@ " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy**@#wY$: E'b& >V!!# wY$:s$ s@ # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0$wY$: E'b& >V!!# wY$:s$ s@ $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** %wY$: E'b& >V!!# wY$:s$ s@ % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** &wY$: E'b& >V!!# wY$:s$ s@ & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **'wY$: E'b& >V!!# wY$:s$ s@ ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**(wY$: E'b& >V!!# wY$:s$ s@ ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**()wY$: E'b& >V!!# wY$:s$ s@ ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@*"Q}%: E'b& >V!!# "Q}%:s= s * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**+"Q}%: E'b& >V!!# "Q}%:s= s + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,"Q}%: E'b& >V!!# "Q}%:s= s , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**-"Q}%: E'b& >V!!# "Q}%:s= s - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ."Q}%: E'b& >V!!# "Q}%:s= s . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **/"Q}%: E'b& >V!!# "Q}%:s= s / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**0"Q}%: E'b& >V!!# "Q}%:s= s 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**1"Q}%: E'b& >V!!# "Q}%:s= s 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**02"Q}%: E'b& >V!!# "Q}%:s= s 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**3"Q}%: E'b& >V!!# "Q}%:s= s 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**4"Q}%: E'b& >V!!# "Q}%:s= s 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**5"Q}%: E'b& >V!!# "Q}%:s= s 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f**6"Q}%: E'b& >V!!# "Q}%:s= s 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 7"Q}%: E'b& >V!!# "Q}%:s= s 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **8"Q}%: E'b& >V!!# "Q}%:s= s 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**9"Q}%: E'b& >V!!# "Q}%:s= s 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**:"Q}%: E'b& >V!!# "Q}%:s= s : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**;"Q}%: E'b& >V!!# "Q}%:s= s ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(<"Q}%: E'b& >V!!# "Q}%:s= s < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@="Q}%: E'b& >V!!# "Q}%:s= s = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0>"Q}%: E'b& >V!!# "Q}%:s= s > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ?"Q}%: E'b& >V!!# "Q}%:s= s ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** @"Q}%: E'b& >V!!# "Q}%:s= s @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **A"Q}%: E'b& >V!!# "Q}%:s= s A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**B"Q}%: E'b& >V!!# "Q}%:s= s B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(C"Q}%: E'b& >V!!# "Q}%:s= s C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Do{P E'b& >V!!# o{P:9uVquV$ D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Eo{P E'b& >V!!# o{P:9uVquV$ E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Fo{P E'b& >V!!# o{P:9uVquV$ F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Go{P E'b& >V!!# o{P:9uVquV$ G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ho{P E'b& >V!!# o{P:9uVquV$ H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Io{P E'b& >V!!# o{P:9uVquV$ I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Jo{P E'b& >V!!# o{P:9uVquV$ J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ko{P E'b& >V!!# o{P:9uVquV$ K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Lo{P E'b& >V!!# o{P:9uVquV$ L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789^T0**Mo{P E'b& >V!!# o{P:9uVquV$ M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**No{P E'b& >V!!# o{P:9uVquV$ N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Oo{P E'b& >V!!# o{P:9uVquV$ O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Po{P E'b& >V!!# o{P:9uVquV$ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Qo{P E'b& >V!!# o{P:9uVquV$ Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **Ro{P E'b& >V!!# o{P:9uVquV$ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**So{P E'b& >V!!# o{P:9uVquV$ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**To{P E'b& >V!!# o{P:9uVquV$ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Uo{P E'b& >V!!# o{P:9uVquV$ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Vo{P E'b& >V!!# o{P:9uVquV$ V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@Wo{P E'b& >V!!# o{P:9uVquV$ W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Xo{P E'b& >V!!# o{P:9uVquV$ X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Yo{P E'b& >V!!# o{P:9uVquV$ Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Zo{P E'b& >V!!# o{P:9uVquV$ Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **[o{P E'b& >V!!# o{P:9uVquV$ [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**\o{P E'b& >V!!# o{P:9uVquV$ \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(]o{P E'b& >V!!# o{P:9uVquV$ ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ^!R E'b& >V!!# !R:9uV!ruVT^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **_!R E'b& >V!!# !R:9uV!ruVT_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**`!R E'b& >V!!# !R:9uV!ruVT` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**a!R E'b& >V!!# !R:9uV!ruVTa ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** b!R E'b& >V!!# !R:9uV!ruVTb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **c!R E'b& >V!!# !R:9uV!ruVTc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**d!R E'b& >V!!# !R:9uV!ruVTd ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**e!R E'b& >V!!# !R:9uV!ruVTe ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0f!R E'b& >V!!# !R:9uV!ruVTf ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789m0**g!R E'b& >V!!# !R:9uV!ruVTg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**h!R E'b& >V!!# !R:9uV!ruVTh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**i!R E'b& >V!!# !R:9uV!ruVTi ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**j!R E'b& >V!!# !R:9uV!ruVTj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** k!R E'b& >V!!# !R:9uV!ruVTk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **l!R E'b& >V!!# !R:9uV!ruVTl ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**m!R E'b& >V!!# !R:9uV!ruVTm ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**n!R E'b& >V!!# !R:9uV!ruVTn ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**o!R E'b& >V!!# !R:9uV!ruVTo ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(p!R E'b& >V!!# !R:9uV!ruVTp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@q!R E'b& >V!!# !R:9uV!ruVTq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0r!R E'b& >V!!# !R:9uV!ruVTr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** s!R E'b& >V!!# !R:9uV!ruVTs ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** t!R E'b& >V!!# !R:9uV!ruVTt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **u!R E'b& >V!!# !R:9uV!ruVTu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**v!R E'b& >V!!# !R:9uV!ruVTv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(w!R E'b& >V!!# !R:9uV!ruVTw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** xR E'b& >V!!# R:9uV:ruVT x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-UST C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **yR E'b& >V!!# R:9uV:ruVT y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**zR E'b& >V!!# R:9uV:ruVT z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**{R E'b& >V!!# R:9uV:ruVT { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** |R E'b& >V!!# R:9uV:ruVT | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **}R E'b& >V!!# R:9uV:ruVT } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**~R E'b& >V!!# R:9uV:ruVT ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789$#0**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-#**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2#**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&T C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(R E'b& >V!!# R:9uV:ruVT  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**eR E'b&  >V!#eRP- Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational >/C>/C;WyP8DA-l= RegistryKey A)l= ErrorCode A%l=Message RZControl Panel\International\User ProfileThe system cannot find the file specified. cr** ) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exef **) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2f**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .fWindows-International/Operational .ElfChnk x(a<ˆDl=f?mMF:&**) E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,/y** ) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0w**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789erSh0**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .a**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** ) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 , **) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe / **) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe : **() E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttroso0** ) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** ) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**) E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**() E'b& >V!!# )=r]Fr<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyI(**@6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2:6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe+@**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,/** 6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0w**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**06+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789erSh0**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .3**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** 6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**06+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttersh0** 6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(6+ E'b& >V!!# 6+=rmFr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2: ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,/** ,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0w**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789erSh0**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .3**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** ,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttersh0** ,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** ,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(,ۇ, E'b& >V!!# ,ۇ,=r~Fr  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2: ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,/** VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0w**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789erSh0**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .3**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttersh0** VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(VL E'b& >V!!# VLKZ ԅ   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 5fYL E'b& >V!!# 5fYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2: ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,/** tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0w**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789erSh0**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r** tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ter ** tYL E'b& >V!!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1rtional+:WcL. E'b& >Val!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk } }S?F4Dl=f?mMF &** tYL E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+/y** tYL E'b& >V!!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** tYL E'b& >V!!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( tYL E'b& >V!!# tYLKZ K`    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(tYL E'b& >V!!# tYLKZ K`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i** qZL E'b& >V!!# qZLKZ   4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**!qZL E'b& >V!!# qZLKZ   4 ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "qZL E'b& >V!!# qZLKZ   4 " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **#qZL E'b& >V!!# qZLKZ   4 # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**$qZL E'b& >V!!# qZLKZ   4 $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+/**%qZL E'b& >V!!# qZLKZ   4 % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**&qZL E'b& >V!!# qZLKZ   4 & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**('qZL E'b& >V!!# qZLKZ   4 ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@(qZL E'b& >V!!# qZLKZ   4 ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0)qZL E'b& >V!!# qZLKZ   4 ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** *qZL E'b& >V!!# qZLKZ   4 * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** +qZL E'b& >V!!# qZLKZ   4 + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **,qZL E'b& >V!!# qZLKZ   4 , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**-qZL E'b& >V!!# qZLKZ   4 - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(.qZL E'b& >V!!# qZLKZ   4 . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** / E'b& >V!!# \BpiPtpi8/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **0 E'b& >V!!# \BpiPtpi80 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1 E'b& >V!!# \BpiPtpi81 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2 E'b& >V!!# \BpiPtpi82 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3 E'b& >V!!# \BpiPtpi83 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **4 E'b& >V!!# \BpiPtpi84 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**5 E'b& >V!!# \BpiPtpi85 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**6 E'b& >V!!# \BpiPtpi86 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**07 E'b& >V!!# \BpiPtpi87 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**8 E'b& >V!!# \BpiPtpi88 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**9 E'b& >V!!# \BpiPtpi89 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**: E'b& >V!!# \BpiPtpi8: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**; E'b& >V!!# \BpiPtpi8; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** < E'b& >V!!# \BpiPtpi8< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **= E'b& >V!!# \BpiPtpi8= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**> E'b& >V!!# \BpiPtpi8> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+/**? E'b& >V!!# \BpiPtpi8? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**@ E'b& >V!!# \BpiPtpi8@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(A E'b& >V!!# \BpiPtpi8A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@B E'b& >V!!# \BpiPtpi8B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0C E'b& >V!!# \BpiPtpi8C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** D E'b& >V!!# \BpiPtpi8D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** E E'b& >V!!# \BpiPtpi8E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **F E'b& >V!!# \BpiPtpi8F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**G E'b& >V!!# \BpiPtpi8G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(H E'b& >V!!# \BpiPtpi8H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Iغλ E'b& >V!!# غλ\BpiHpi( I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Jغλ E'b& >V!!# غλ\BpiHpi( J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Kغλ E'b& >V!!# غλ\BpiHpi( K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Lغλ E'b& >V!!# غλ\BpiHpi( L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Mغλ E'b& >V!!# غλ\BpiHpi( M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Nغλ E'b& >V!!# غλ\BpiHpi( N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Oغλ E'b& >V!!# غλ\BpiHpi( O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Pغλ E'b& >V!!# غλ\BpiHpi( P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0Qغλ E'b& >V!!# غλ\BpiHpi( Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**Rغλ E'b& >V!!# غλ\BpiHpi( R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Sغλ E'b& >V!!# غλ\BpiHpi( S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Tغλ E'b& >V!!# غλ\BpiHpi( T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Uغλ E'b& >V!!# غλ\BpiHpi( U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Vغλ E'b& >V!!# غλ\BpiHpi( V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Wغλ E'b& >V!!# غλ\BpiHpi( W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Xغλ E'b& >V!!# غλ\BpiHpi( X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+/**Yغλ E'b& >V!!# غλ\BpiHpi( Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Zغλ E'b& >V!!# غλ\BpiHpi( Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**([غλ E'b& >V!!# غλ\BpiHpi( [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@\غλ E'b& >V!!# غλ\BpiHpi( \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0]غλ E'b& >V!!# غλ\BpiHpi( ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ^غλ E'b& >V!!# غλ\BpiHpi( ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** _غλ E'b& >V!!# غλ\BpiHpi( _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **`غλ E'b& >V!!# غλ\BpiHpi( ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**aغλ E'b& >V!!# غλ\BpiHpi( a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(bغλ E'b& >V!!# غλ\BpiHpi( b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** c| E'b& >V!!# |\Bpitpi|l c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **d| E'b& >V!!# |\Bpitpi|l d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**e| E'b& >V!!# |\Bpitpi|l e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**f| E'b& >V!!# |\Bpitpi|l f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** g| E'b& >V!!# |\Bpitpi|l g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **h| E'b& >V!!# |\Bpitpi|l h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**i| E'b& >V!!# |\Bpitpi|l i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**j| E'b& >V!!# |\Bpitpi|l j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0k| E'b& >V!!# |\Bpitpi|l k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**l| E'b& >V!!# |\Bpitpi|l l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**m| E'b& >V!!# |\Bpitpi|l m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**n| E'b& >V!!# |\Bpitpi|l n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**o| E'b& >V!!# |\Bpitpi|l o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** p| E'b& >V!!# |\Bpitpi|l p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **q| E'b& >V!!# |\Bpitpi|l q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**r| E'b& >V!!# |\Bpitpi|l r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+/**s| E'b& >V!!# |\Bpitpi|l s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**t| E'b& >V!!# |\Bpitpi|l t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(u| E'b& >V!!# |\Bpitpi|l u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@v| E'b& >V!!# |\Bpitpi|l v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0w| E'b& >V!!# |\Bpitpi|l w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** x| E'b& >V!!# |\Bpitpi|l x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** y| E'b& >V!!# |\Bpitpi|l y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **z| E'b& >V!!# |\Bpitpi|l z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**{| E'b& >V!!# |\Bpitpi|l { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(|| E'b& >V!!# |\Bpitpi|l | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** }S E'b& >V!!# Snz#z } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  > E'b& >V 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk~~pedrnDl=f?mMFM>&**~S E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# Snz#z ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2/y**S E'b& >V!!# Snz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**S E'b& >V!!# Snz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** S E'b& >V!!# Snz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **z E'b& >V!!# znz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**z E'b& >V!!# znz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**z E'b& >V!!# znz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0 E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a**  E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0  ** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe : **( E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0 E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0**  E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W **  E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo ** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o** E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**( E'b& >V!!# nz#z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2M>6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2/**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** =1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** =1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@=1 E'b& >V!!# =1nzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0`X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** `X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** `X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **`X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**`X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(`X E'b& >V!!# `Xnzz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2M> ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2/**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(s E'b& >V!!# snzzt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2M> ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2/**OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**OOV E'b& >V!!# OOVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(OV E'b& >V!!# OVo o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2M> ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2/**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3WindowsPower E'b& >V!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkeeXZ2}Dl=f?mMF %&**;SV E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0****;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 %6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** ع E'b& >V!!# عP{hQ{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0!ع E'b& >V!!# عP{hQ{! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789`X0**"ع E'b& >V!!# عP{hQ{" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**#ع E'b& >V!!# عP{hQ{# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$ع E'b& >V!!# عP{hQ{$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%ع E'b& >V!!# عP{hQ{% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &ع E'b& >V!!# عP{hQ{& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **'ع E'b& >V!!# عP{hQ{' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**(ع E'b& >V!!# عP{hQ{( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**)ع E'b& >V!!# عP{hQ{) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y***ع E'b& >V!!# عP{hQ{* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(+;!ع E'b& >V!!# ;!عP{hQ{+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@,;!ع E'b& >V!!# ;!عP{hQ{, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0-;!ع E'b& >V!!# ;!عP{hQ{- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** .;!ع E'b& >V!!# ;!عP{hQ{. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** /;!ع E'b& >V!!# ;!عP{hQ{/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0;!ع E'b& >V!!# ;!عP{hQ{0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**1;!ع E'b& >V!!# ;!عP{hQ{1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(2;!ع E'b& >V!!# ;!عP{hQ{2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 3$۹ E'b& >V!!# $۹P{Q{D3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **4$۹ E'b& >V!!# $۹P{Q{D4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5$۹ E'b& >V!!# $۹P{Q{D5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6$۹ E'b& >V!!# $۹P{Q{D6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 7$۹ E'b& >V!!# $۹P{Q{D7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **8$۹ E'b& >V!!# $۹P{Q{D8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9$۹ E'b& >V!!# $۹P{Q{D9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:$۹ E'b& >V!!# $۹P{Q{D: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0;$۹ E'b& >V!!# $۹P{Q{D; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789s0**<$۹ E'b& >V!!# $۹P{Q{D< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**=$۹ E'b& >V!!# $۹P{Q{D= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**>$۹ E'b& >V!!# $۹P{Q{D> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?$۹ E'b& >V!!# $۹P{Q{D? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @$۹ E'b& >V!!# $۹P{Q{D@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **A$۹ E'b& >V!!# $۹P{Q{DA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**B$۹ E'b& >V!!# $۹P{Q{DB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**C$۹ E'b& >V!!# $۹P{Q{DC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**D$۹ E'b& >V!!# $۹P{Q{DD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(E$۹ E'b& >V!!# $۹P{Q{DE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@F$۹ E'b& >V!!# $۹P{Q{DF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0G$۹ E'b& >V!!# $۹P{Q{DG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** H$۹ E'b& >V!!# $۹P{Q{DH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** I$۹ E'b& >V!!# $۹P{Q{DI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **J$۹ E'b& >V!!# $۹P{Q{DJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**K$۹ E'b& >V!!# $۹P{Q{DK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(L$۹ E'b& >V!!# $۹P{Q{DL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** M9۹ E'b& >V!!# 9۹P{Q{ M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **N9۹ E'b& >V!!# 9۹P{Q{ N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**O9۹ E'b& >V!!# 9۹P{Q{ O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**P9۹ E'b& >V!!# 9۹P{Q{ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Q9۹ E'b& >V!!# 9۹P{Q{ Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **R9۹ E'b& >V!!# 9۹P{Q{ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**S9۹ E'b& >V!!# 9۹P{Q{ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**T9۹ E'b& >V!!# 9۹P{Q{ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0U9۹ E'b& >V!!# 9۹P{Q{ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789O0**V9۹ E'b& >V!!# 9۹P{Q{ V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-O**W9۹ E'b& >V!!# 9۹P{Q{ W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2O**X9۹ E'b& >V!!# 9۹P{Q{ X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Y9۹ E'b& >V!!# 9۹P{Q{ Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Z9۹ E'b& >V!!# 9۹P{Q{ Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **[9۹ E'b& >V!!# 9۹P{Q{ [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**\9۹ E'b& >V!!# 9۹P{Q{ \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**]9۹ E'b& >V!!# 9۹P{Q{ ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**^9۹ E'b& >V!!# 9۹P{Q{ ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(_9۹ E'b& >V!!# 9۹P{Q{ _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@`9۹ E'b& >V!!# 9۹P{Q{ ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0a9۹ E'b& >V!!# 9۹P{Q{ a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** b9۹ E'b& >V!!# 9۹P{Q{ b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** c9۹ E'b& >V!!# 9۹P{Q{ c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **d9۹ E'b& >V!!# 9۹P{Q{ d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**e9۹ E'b& >V!!# 9۹P{Q{ e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkffff 鎻8Dl=f?mMF&**f9۹ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 9۹P{Q{ f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy*;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(;SV E'b& >V!!# ;SVo ,o   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 %6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** ]1SV E'b& >V!!# ]1SVo Bo   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(]1SV E'b& >V!!# ]1SVo Bo  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ع E'b& >V!!# عP{hQ{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** ع E'b& >V!!# عP{hQ{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0!ع E'b& >V!!# عP{hQ{! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789`X0**"ع E'b& >V!!# عP{hQ{" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**#ع E'b& >V!!# عP{hQ{# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$ع E'b& >V!!# عP{hQ{$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%ع E'b& >V!!# عP{hQ{% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &ع E'b& >V!!# عP{hQ{& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **'ع E'b& >V!!# عP{hQ{' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**(ع E'b& >V!!# عP{hQ{( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**)ع E'b& >V!!# عP{hQ{) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y***ع E'b& >V!!# عP{hQ{* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(+;!ع E'b& >V!!# ;!عP{hQ{+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@,;!ع E'b& >V!!# ;!عP{hQ{, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0-;!ع E'b& >V!!# ;!عP{hQ{- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** .;!ع E'b& >V!!# ;!عP{hQ{. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** /;!ع E'b& >V!!# ;!عP{hQ{/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0;!ع E'b& >V!!# ;!عP{hQ{0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**1;!ع E'b& >V!!# ;!عP{hQ{1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(2;!ع E'b& >V!!# ;!عP{hQ{2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 3$۹ E'b& >V!!# $۹P{Q{D3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **4$۹ E'b& >V!!# $۹P{Q{D4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5$۹ E'b& >V!!# $۹P{Q{D5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6$۹ E'b& >V!!# $۹P{Q{D6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 7$۹ E'b& >V!!# $۹P{Q{D7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **8$۹ E'b& >V!!# $۹P{Q{D8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9$۹ E'b& >V!!# $۹P{Q{D9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:$۹ E'b& >V!!# $۹P{Q{D: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0;$۹ E'b& >V!!# $۹P{Q{D; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789s0**<$۹ E'b& >V!!# $۹P{Q{D< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**=$۹ E'b& >V!!# $۹P{Q{D= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**>$۹ E'b& >V!!# $۹P{Q{D> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?$۹ E'b& >V!!# $۹P{Q{D? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @$۹ E'b& >V!!# $۹P{Q{D@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **A$۹ E'b& >V!!# $۹P{Q{DA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**B$۹ E'b& >V!!# $۹P{Q{DB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**C$۹ E'b& >V!!# $۹P{Q{DC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**D$۹ E'b& >V!!# $۹P{Q{DD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(E$۹ E'b& >V!!# $۹P{Q{DE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@F$۹ E'b& >V!!# $۹P{Q{DF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0G$۹ E'b& >V!!# $۹P{Q{DG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** H$۹ E'b& >V!!# $۹P{Q{DH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** I$۹ E'b& >V!!# $۹P{Q{DI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **J$۹ E'b& >V!!# $۹P{Q{DJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**K$۹ E'b& >V!!# $۹P{Q{DK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(L$۹ E'b& >V!!# $۹P{Q{DL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** M9۹ E'b& >V!!# 9۹P{Q{ M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 % ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **N9۹ E'b& >V!!# 9۹P{Q{ N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**O9۹ E'b& >V!!# 9۹P{Q{ O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**P9۹ E'b& >V!!# 9۹P{Q{ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Q9۹ E'b& >V!!# 9۹P{Q{ Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **R9۹ E'b& >V!!# 9۹P{Q{ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**S9۹ E'b& >V!!# 9۹P{Q{ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**T9۹ E'b& >V!!# 9۹P{Q{ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0U9۹ E'b& >V!!# 9۹P{Q{ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789O0**V9۹ E'b& >V!!# 9۹P{Q{ V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-O**W9۹ E'b& >V!!# 9۹P{Q{ W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2O**X9۹ E'b& >V!!# 9۹P{Q{ X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Y9۹ E'b& >V!!# 9۹P{Q{ Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Z9۹ E'b& >V!!# 9۹P{Q{ Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **[9۹ E'b& >V!!# 9۹P{Q{ [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**\9۹ E'b& >V!!# 9۹P{Q{ \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**]9۹ E'b& >V!!# 9۹P{Q{ ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**^9۹ E'b& >V!!# 9۹P{Q{ ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(_9۹ E'b& >V!!# 9۹P{Q{ _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@`9۹ E'b& >V!!# 9۹P{Q{ ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0a9۹ E'b& >V!!# 9۹P{Q{ a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** b9۹ E'b& >V!!# 9۹P{Q{ b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** c9۹ E'b& >V!!# 9۹P{Q{ c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **d9۹ E'b& >V!!# 9۹P{Q{ d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**e9۹ E'b& >V!!# 9۹P{Q{ e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk pʌc!Dl=f?mMF5<&**QԵ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01 **QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(QԵ E'b& >V!!# QԵo& p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25<6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** '2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** '2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**'2O8 E'b& >V!!# '2O8}J} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**¿'2O8 E'b& >V!!# '2O8}J}¿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**ÿ'2O8 E'b& >V!!# '2O8}J}ÿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(Ŀ'2O8 E'b& >V!!# '2O8}J}Ŀ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ſ'2O8 E'b& >V!!# '2O8}J}ſ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0ƿ'2O8 E'b& >V!!# '2O8}J}ƿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** ǿ'2O8 E'b& >V!!# '2O8}J}ǿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** ȿ'2O8 E'b& >V!!# '2O8}J}ȿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **ɿ'2O8 E'b& >V!!# '2O8}J}ɿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ʿ'2O8 E'b& >V!!# '2O8}J}ʿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(˿'2O8 E'b& >V!!# '2O8}J}˿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ̿tP8 E'b& >V!!# tP8}K}̿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ͿtP8 E'b& >V!!# tP8}K}Ϳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**οtP8 E'b& >V!!# tP8}K}ο ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ϿtP8 E'b& >V!!# tP8}K}Ͽ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** пtP8 E'b& >V!!# tP8}K}п ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ѿtP8 E'b& >V!!# tP8}K}ѿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ҿtP8 E'b& >V!!# tP8}K}ҿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**ӿtP8 E'b& >V!!# tP8}K}ӿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0ԿtP8 E'b& >V!!# tP8}K}Կ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**տtP8 E'b& >V!!# tP8}K}տ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**ֿtP8 E'b& >V!!# tP8}K}ֿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**׿tP8 E'b& >V!!# tP8}K}׿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ؿtP8 E'b& >V!!# tP8}K}ؿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ٿtP8 E'b& >V!!# tP8}K}ٿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **ڿtP8 E'b& >V!!# tP8}K}ڿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**ۿtP8 E'b& >V!!# tP8}K}ۿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**ܿtP8 E'b& >V!!# tP8}K}ܿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**ݿtP8 E'b& >V!!# tP8}K}ݿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(޿tP8 E'b& >V!!# tP8}K}޿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@߿tP8 E'b& >V!!# tP8}K}߿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(tP8 E'b& >V!!# tP8}K} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Q8 E'b& >V!!# Q8}5K}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**00yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** 0yL) E'b& >V!!# 0yL)uU]U$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h** 0yL) E'b& >V!!# 0yL)uU]U$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** 0yL) E'b& >V!!# 0yL)uU]U$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** 0yL) E'b& >V!!# 0yL)uU]U$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3**  0yL) E'b& >V!!# 0yL)uU]U$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow owerShell\v1 E'b& >VE'b!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkdCDl=f?mMF"&**0yL) E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**00yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(0yL) E'b& >V!!# 0yL)uU]U$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2"6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** ]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **]+* E'b& >V!!# ]+*uUU  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n** ]+* E'b& >V!!# ]+*uUU   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**!]+* E'b& >V!!# ]+*uUU ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0"]+* E'b& >V!!# ]+*uUU " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**#]+* E'b& >V!!# ]+*uUU # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**$]+* E'b& >V!!# ]+*uUU $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**%]+* E'b& >V!!# ]+*uUU % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**&]+* E'b& >V!!# ]+*uUU & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ']+* E'b& >V!!# ]+*uUU ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **(]+* E'b& >V!!# ]+*uUU ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**)]+* E'b& >V!!# ]+*uUU ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+***]+* E'b& >V!!# ]+*uUU * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**+]+* E'b& >V!!# ]+*uUU + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(,]+* E'b& >V!!# ]+*uUU , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@-]+* E'b& >V!!# ]+*uUU - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0.]+* E'b& >V!!# ]+*uUU . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** /]+* E'b& >V!!# ]+*uUU / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 0]+* E'b& >V!!# ]+*uUU 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **1]+* E'b& >V!!# ]+*uUU 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**2]+* E'b& >V!!# ]+*uUU 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(3]+* E'b& >V!!# ]+*uUU 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 4o+ E'b& >V!!# o+uUU4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5o+ E'b& >V!!# o+uUU5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6o+ E'b& >V!!# o+uUU6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**7o+ E'b& >V!!# o+uUU7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 8o+ E'b& >V!!# o+uUU8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **9o+ E'b& >V!!# o+uUU9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:o+ E'b& >V!!# o+uUU: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**;o+ E'b& >V!!# o+uUU; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0<o+ E'b& >V!!# o+uUU< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ɿ0**=o+ E'b& >V!!# o+uUU= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**>o+ E'b& >V!!# o+uUU> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**?o+ E'b& >V!!# o+uUU? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@o+ E'b& >V!!# o+uUU@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ao+ E'b& >V!!# o+uUUA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Bo+ E'b& >V!!# o+uUUB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Co+ E'b& >V!!# o+uUUC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Do+ E'b& >V!!# o+uUUD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Eo+ E'b& >V!!# o+uUUE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Fo+ E'b& >V!!# o+uUUF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@Go+ E'b& >V!!# o+uUUG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Ho+ E'b& >V!!# o+uUUH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Io+ E'b& >V!!# o+uUUI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Jo+ E'b& >V!!# o+uUUJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Ko+ E'b& >V!!# o+uUUK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Lo+ E'b& >V!!# o+uUUL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Mo+ E'b& >V!!# o+uUUM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** NO E'b& >V!!# OJ8*|}c*|8\ N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **OO E'b& >V!!# OJ8*|}c*|8\ O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**PO E'b& >V!!# OJ8*|}c*|8\ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**QO E'b& >V!!# OJ8*|}c*|8\ Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** RO E'b& >V!!# OJ8*|}c*|8\ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **SO E'b& >V!!# OJ8*|}c*|8\ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**TO E'b& >V!!# OJ8*|}c*|8\ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**UO E'b& >V!!# OJ8*|}c*|8\ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0VO E'b& >V!!# OJ8*|}c*|8\ V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**WO E'b& >V!!# OJ8*|}c*|8\ W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**XO E'b& >V!!# OJ8*|}c*|8\ X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**YO E'b& >V!!# OJ8*|}c*|8\ Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ZO E'b& >V!!# OJ8*|}c*|8\ Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** [O E'b& >V!!# OJ8*|}c*|8\ [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **\O E'b& >V!!# OJ8*|}c*|8\ \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**]O E'b& >V!!# OJ8*|}c*|8\ ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**^O E'b& >V!!# OJ8*|}c*|8\ ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**_O E'b& >V!!# OJ8*|}c*|8\ _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(`O E'b& >V!!# OJ8*|}c*|8\ ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@aO E'b& >V!!# OJ8*|}c*|8\ a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0bO E'b& >V!!# OJ8*|}c*|8\ b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** cO E'b& >V!!# OJ8*|}c*|8\ c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** dO E'b& >V!!# OJ8*|}c*|8\ d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **eO E'b& >V!!# OJ8*|}c*|8\ e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**fO E'b& >V!!# OJ8*|}c*|8\ f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(gO E'b& >V!!# OJ8*|}c*|8\ g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** h4Q E'b& >V!!# 4QJ8*|c*|X h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-USX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **i4Q E'b& >V!!# 4QJ8*|c*|X i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**j4Q E'b& >V!!# 4QJ8*|c*|X j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**k4Q E'b& >V!!# 4QJ8*|c*|X k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** l4Q E'b& >V!!# 4QJ8*|c*|X l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **m4Q E'b& >V!!# 4QJ8*|c*|X m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**n4Q E'b& >V!!# 4QJ8*|c*|X n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**o4Q E'b& >V!!# 4QJ8*|c*|X o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0p4Q E'b& >V!!# 4QJ8*|c*|X p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**q4Q E'b& >V!!# 4QJ8*|c*|X q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**r4Q E'b& >V!!# 4QJ8*|c*|X r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**s4Q E'b& >V!!# 4QJ8*|c*|X s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**t4Q E'b& >V!!# 4QJ8*|c*|X t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** u4Q E'b& >V!!# 4QJ8*|c*|X u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **v4Q E'b& >V!!# 4QJ8*|c*|X v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**w4Q E'b& >V!!# 4QJ8*|c*|X w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**x4Q E'b& >V!!# 4QJ8*|c*|X x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**y4Q E'b& >V!!# 4QJ8*|c*|X y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(z4Q E'b& >V!!# 4QJ8*|c*|X z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@{4Q E'b& >V!!# 4QJ8*|c*|X { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&X C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0|4Q E'b& >V!!# 4QJ8*|c*|X | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** }4Q E'b& >V!!# 4QJ8*|c*|X } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ~4Q E'b& >V!!# 4QJ8*|c*|X ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **4Q E'b& >V!!# 4QJ8*|c*|X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**4Q E'b& >V!!# 4QJ8*|c*|X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(4Q E'b& >V!!# 4QJ8*|c*|X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkp. 9Dl=f?mMF& **BIR E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿W0$DD EventDataA=loData= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe**(BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . .Ŀ[9TDA)l= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2r(**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r** BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0?w **BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0I**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $c**0BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ft-W0**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-W**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2W**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .c**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,W** BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&LC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(BIR E'b& >V!!# BIRJ8*|c*|L, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** J E'b& >V!!# J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy ** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00** J E'b& >V!!#  J) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(NJ E'b& >V!!# NJ) 1  P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@J E'b& >V!!# J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0>J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** >J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** >J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **>J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**>J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(>J E'b& >V!!# >J) 1    ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** pJ E'b& >V!!# pJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **pJ E'b& >V!!# pJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**pJ E'b& >V!!# pJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(qJ E'b& >V!!# qJ) 2 ,X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t,C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** * E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe *** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** * E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy *** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0* E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .hl\v1.0\power E'b& >VE'b!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkiiOG.qQDl=f?mMF%'&*** E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l.** * E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l *** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1i*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+i*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(* E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyal(**@* E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&TC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyt-Wi@**0* E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tttern0** * E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMndow ** * E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMs-In *** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6n*** E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0n**(* E'b& >V!!# *5zhfzhTh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tTC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyo(**@. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%'6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** . E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** . E'b& >V!!# .5zhfzh D  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** . E'b& >V!!# .5zhfzh D  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** . E'b& >V!!# .5zhfzh D  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 . E'b& >V!!# .5zhfzh D  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789BIR0** . E'b& >V!!# .5zhfzh D  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-R**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2R**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** . E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** . E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** . E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(. E'b& >V!!# .5zhfzh D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** }%/ E'b& >V!!# }%/5zhgzh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **}%/ E'b& >V!!# }%/5zhgzh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** }%/ E'b& >V!!# }%/5zhgzh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**!}%/ E'b& >V!!# }%/5zhgzh! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "}%/ E'b& >V!!# }%/5zhgzh" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **#}%/ E'b& >V!!# }%/5zhgzh# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**$}%/ E'b& >V!!# }%/5zhgzh$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**%}%/ E'b& >V!!# }%/5zhgzh% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0&}%/ E'b& >V!!# }%/5zhgzh& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789N0**'}%/ E'b& >V!!# }%/5zhgzh' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**(}%/ E'b& >V!!# }%/5zhgzh( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**)}%/ E'b& >V!!# }%/5zhgzh) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .***}%/ E'b& >V!!# }%/5zhgzh* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** +߇/ E'b& >V!!# ߇/5zhgzh+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **,߇/ E'b& >V!!# ߇/5zhgzh, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**-߇/ E'b& >V!!# ߇/5zhgzh- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**.߇/ E'b& >V!!# ߇/5zhgzh. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**/߇/ E'b& >V!!# ߇/5zhgzh/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(0߇/ E'b& >V!!# ߇/5zhgzh0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@1߇/ E'b& >V!!# ߇/5zhgzh1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**02߇/ E'b& >V!!# ߇/5zhgzh2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 3߇/ E'b& >V!!# ߇/5zhgzh3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 4߇/ E'b& >V!!# ߇/5zhgzh4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **5߇/ E'b& >V!!# ߇/5zhgzh5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6߇/ E'b& >V!!# ߇/5zhgzh6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(7߇/ E'b& >V!!# ߇/5zhgzh7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 8r  E'b& >V!!# r ȫX8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9r  E'b& >V!!# r ȫX9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:r  E'b& >V!!# r ȫX: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;r  E'b& >V!!# r ȫX; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** <r  E'b& >V!!# r ȫX< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **=r  E'b& >V!!# r ȫX= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**>r  E'b& >V!!# r ȫX> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**?r  E'b& >V!!# r ȫX? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0@r  E'b& >V!!# r ȫX@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789>0**Ar  E'b& >V!!# r ȫXA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Br  E'b& >V!!# r ȫXB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Cr  E'b& >V!!# r ȫXC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Dr  E'b& >V!!# r ȫXD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Er  E'b& >V!!# r ȫXE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **Fr  E'b& >V!!# r ȫXF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Gr  E'b& >V!!# r ȫXG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Hr  E'b& >V!!# r ȫXH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**Ir  E'b& >V!!# r ȫXI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Jr  E'b& >V!!# r ȫXJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@Kr  E'b& >V!!# r ȫXK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Lr  E'b& >V!!# r ȫXL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Mr  E'b& >V!!# r ȫXM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Nr  E'b& >V!!# r ȫXN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Or  E'b& >V!!# r ȫXO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Pr  E'b& >V!!# r ȫXP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Qr  E'b& >V!!# r ȫXQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** R E'b& >V!!# h hR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USh C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **S E'b& >V!!# h hS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**T E'b& >V!!# h hT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**U E'b& >V!!# h hU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** V E'b& >V!!# h hV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **W E'b& >V!!# h hW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**X E'b& >V!!# h hX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Y E'b& >V!!# h hY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Z E'b& >V!!# h hZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789q0**[ E'b& >V!!# h h[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**\ E'b& >V!!# h h\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**] E'b& >V!!# h h] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**^ E'b& >V!!# h h^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _ E'b& >V!!# h h_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **` E'b& >V!!# h h` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**a E'b& >V!!# h ha ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**b E'b& >V!!# h hb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**c E'b& >V!!# h hc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(d E'b& >V!!# h hd ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@e E'b& >V!!# h he ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&h C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0f E'b& >V!!# h hf ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** g E'b& >V!!# h hg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** h E'b& >V!!# h hh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **i E'b& >V!!# h hi ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkjj&a@Dl=f?mMF &**j E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# h hj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0l.**(k E'b& >V!!# h hk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@l Z E'b& >V!!#  Ztl ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**m Z E'b& >V!!#  Ztm ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**n Z E'b& >V!!#  Ztn ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**o Z E'b& >V!!#  Zto ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** p Z E'b& >V!!#  Ztp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **q Z E'b& >V!!#  Ztq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**r Z E'b& >V!!#  Ztr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**s Z E'b& >V!!#  Zts ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0t Z E'b& >V!!#  Ztt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**u Z E'b& >V!!#  Ztu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**v Z E'b& >V!!#  Ztv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**w Z E'b& >V!!#  Ztw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**x Z E'b& >V!!#  Ztx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** y Z E'b& >V!!#  Zty ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **z Z E'b& >V!!#  Ztz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**{ Z E'b& >V!!#  Zt{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**| Z E'b& >V!!#  Zt| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**} Z E'b& >V!!#  Zt} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(~ Z E'b& >V!!#  Zt~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@ Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0 Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670**  Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q **  Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2R ** Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( Z E'b& >V!!#  Zt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w**  1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh ** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**( 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@ 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670**  1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q **  1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 ** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( 1] E'b& >V!!#  1]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ȱ3] E'b& >V!!# ȱ3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** +3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** +3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** +3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** +3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(+3] E'b& >V!!# +3]5xgx  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(R4] E'b& >V!!# R4]5xgx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0owershell.ex E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkQQANnDl=f?mMFU+&**UDu E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2l.**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(UDu E'b& >V!!# UDulzz| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@ E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892R0** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h**  E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe ** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**( E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& **  E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( E'b& >V!!# lz%z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-UShC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&hC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** ] E'b& >V!!# ]lz>zh  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(!] E'b& >V!!# ]lz>zh ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .thC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** "T  E'b& >V!!# T iIwtw" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **#T  E'b& >V!!# T iIwtw# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$T  E'b& >V!!# T iIwtw$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%T  E'b& >V!!# T iIwtw% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &T  E'b& >V!!# T iIwtw& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **'T  E'b& >V!!# T iIwtw' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(T  E'b& >V!!# T iIwtw( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**)T  E'b& >V!!# T iIwtw) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0*T  E'b& >V!!# T iIwtw* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**+T  E'b& >V!!# T iIwtw+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**,T  E'b& >V!!# T iIwtw, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**-T  E'b& >V!!# T iIwtw- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**.T  E'b& >V!!# T iIwtw. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** /T  E'b& >V!!# T iIwtw/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **0T  E'b& >V!!# T iIwtw0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**1T  E'b& >V!!# T iIwtw1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**2T  E'b& >V!!# T iIwtw2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**3T  E'b& >V!!# T iIwtw3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(4T  E'b& >V!!# T iIwtw4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@5T  E'b& >V!!# T iIwtw5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**06T  E'b& >V!!# T iIwtw6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 7T  E'b& >V!!# T iIwtw7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** 8T  E'b& >V!!# T iIwtw8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **9T  E'b& >V!!# T iIwtw9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**:T  E'b& >V!!# T iIwtw: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(;T  E'b& >V!!# T iIwtw; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** <ZV  E'b& >V!!# ZV iIwtwd< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **=ZV  E'b& >V!!# ZV iIwtwd= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**>ZV  E'b& >V!!# ZV iIwtwd> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?ZV  E'b& >V!!# ZV iIwtwd? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @ZV  E'b& >V!!# ZV iIwtwd@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **AZV  E'b& >V!!# ZV iIwtwdA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**BZV  E'b& >V!!# ZV iIwtwdB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**CZV  E'b& >V!!# ZV iIwtwdC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0DZV  E'b& >V!!# ZV iIwtwdD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**EZV  E'b& >V!!# ZV iIwtwdE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**FZV  E'b& >V!!# ZV iIwtwdF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**GZV  E'b& >V!!# ZV iIwtwdG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**HZV  E'b& >V!!# ZV iIwtwdH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** IZV  E'b& >V!!# ZV iIwtwdI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **JZV  E'b& >V!!# ZV iIwtwdJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**KZV  E'b& >V!!# ZV iIwtwdK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**LZV  E'b& >V!!# ZV iIwtwdL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**MZV  E'b& >V!!# ZV iIwtwdM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(NZV  E'b& >V!!# ZV iIwtwdN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@OZV  E'b& >V!!# ZV iIwtwdO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0PZV  E'b& >V!!# ZV iIwtwdP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** QZV  E'b& >V!!# ZV iIwtwdQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b&  E'b& >VV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkRRpH>(Dl=f?mMF&**RZV  E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ZV iIwtwdR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM.**SZV  E'b& >V!!# ZV iIwtwdS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**TZV  E'b& >V!!# ZV iIwtwdT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(UZV  E'b& >V!!# ZV iIwtwdU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@V* W  E'b& >V!!# * W iIwuw< V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**W* W  E'b& >V!!# * W iIwuw< W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**X* W  E'b& >V!!# * W iIwuw< X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**Y* W  E'b& >V!!# * W iIwuw< Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** Z* W  E'b& >V!!# * W iIwuw< Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **[* W  E'b& >V!!# * W iIwuw< [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**\* W  E'b& >V!!# * W iIwuw< \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**]* W  E'b& >V!!# * W iIwuw< ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0^* W  E'b& >V!!# * W iIwuw< ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**_* W  E'b& >V!!# * W iIwuw< _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**`* W  E'b& >V!!# * W iIwuw< ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**a* W  E'b& >V!!# * W iIwuw< a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**b* W  E'b& >V!!# * W iIwuw< b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** c* W  E'b& >V!!# * W iIwuw< c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **d* W  E'b& >V!!# * W iIwuw< d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**e* W  E'b& >V!!# * W iIwuw< e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**f* W  E'b& >V!!# * W iIwuw< f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**g* W  E'b& >V!!# * W iIwuw< g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(h* W  E'b& >V!!# * W iIwuw< h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@i* W  E'b& >V!!# * W iIwuw< i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0j* W  E'b& >V!!# * W iIwuw< j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** k* W  E'b& >V!!# * W iIwuw< k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** l* W  E'b& >V!!# * W iIwuw< l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **m* W  E'b& >V!!# * W iIwuw< m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**n* W  E'b& >V!!# * W iIwuw< n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(o* W  E'b& >V!!# * W iIwuw< o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** p[Lo E'b& >V!!# [Lo%1W18  p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **q[Lo E'b& >V!!# [Lo%1W18  q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**r[Lo E'b& >V!!# [Lo%1W18  r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**s[Lo E'b& >V!!# [Lo%1W18  s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** t[Lo E'b& >V!!# [Lo%1W18  t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **u[Lo E'b& >V!!# [Lo%1W18  u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**v[Lo E'b& >V!!# [Lo%1W18  v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**w[Lo E'b& >V!!# [Lo%1W18  w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0x[Lo E'b& >V!!# [Lo%1W18  x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**y[Lo E'b& >V!!# [Lo%1W18  y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**z[Lo E'b& >V!!# [Lo%1W18  z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**{[Lo E'b& >V!!# [Lo%1W18  { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**|[Lo E'b& >V!!# [Lo%1W18  | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** }[Lo E'b& >V!!# [Lo%1W18  } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **~[Lo E'b& >V!!# [Lo%1W18  ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**([Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** [Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** [Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**[Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**([Lo E'b& >V!!# [Lo%1W18   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** \co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** \co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** \co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** \co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** \co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(\co E'b& >V!!# \co%1X1  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(o E'b& >V!!# o%10X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\.0\powershel E'b& >V!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk99xN Dl=f?mMF/&**5}$ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** 5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ter **5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1r**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+r**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /r**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :I**(5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyti(**@5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyosof@**05}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tts-In0** 5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMt-Wi ** 5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMndow **5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6w**5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0w**(5}$ E'b& >V!!# 5}$1vv  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyn(**@@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789m0**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** @ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** @ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(@ E'b& >V!!# @1v"v\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Ģ E'b& >V!!# Ģ1v;v  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** Ģ E'b& >V!!# Ģ1v;v   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** Ģ E'b& >V!!# Ģ1v;v   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( Ģ E'b& >V!!# Ģ1v;v   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  T E'b& >V!!# T]LL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** T E'b& >V!!# T]LL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**T E'b& >V!!# T]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**T E'b& >V!!# T]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** T E'b& >V!!# T]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**   E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@  E'b& >V!!#  ]LL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0  E'b& >V!!#  ]LL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** !  E'b& >V!!#  ]LL! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** "  E'b& >V!!#  ]LL" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **#  E'b& >V!!#  ]LL# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**$  E'b& >V!!#  ]LL$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(%  E'b& >V!!#  ]LL% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** &d} E'b& >V!!# d}]LL & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **'d} E'b& >V!!# d}]LL ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(d} E'b& >V!!# d}]LL ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**)d} E'b& >V!!# d}]LL ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** *d} E'b& >V!!# d}]LL * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **+d} E'b& >V!!# d}]LL + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,d} E'b& >V!!# d}]LL , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**-d} E'b& >V!!# d}]LL - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0.d} E'b& >V!!# d}]LL . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**/d} E'b& >V!!# d}]LL / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**0d} E'b& >V!!# d}]LL 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1d} E'b& >V!!# d}]LL 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2d} E'b& >V!!# d}]LL 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 3d} E'b& >V!!# d}]LL 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **4d} E'b& >V!!# d}]LL 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**5d} E'b& >V!!# d}]LL 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**6d} E'b& >V!!# d}]LL 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**7d} E'b& >V!!# d}]LL 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(8d} E'b& >V!!# d}]LL 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@9d} E'b& >V!!# d}]LL 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@ E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk::obDl=f?mMF&**:d} E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# d}]LL : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt** ;d} E'b& >V!!# d}]LL ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** <d} E'b& >V!!# d}]LL < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **=d} E'b& >V!!# d}]LL = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**>d} E'b& >V!!# d}]LL > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(?d} E'b& >V!!# d}]LL ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@@7a E'b& >V!!# 7a]LL \@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exes-In@**A7a E'b& >V!!# 7a]LL \A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2n**B7a E'b& >V!!# 7a]LL \B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .n**C7a E'b& >V!!# 7a]LL \C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,n** D7a E'b& >V!!# 7a]LL \D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **E7a E'b& >V!!# 7a]LL \E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**F7a E'b& >V!!# 7a]LL \F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0r**G7a E'b& >V!!# 7a]LL \G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $I**0H7a E'b& >V!!# 7a]LL \H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789nati0**I7a E'b& >V!!# 7a]LL \I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**J7a E'b& >V!!# 7a]LL \J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**K7a E'b& >V!!# 7a]LL \K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .I**L7a E'b& >V!!# 7a]LL \L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l** M7a E'b& >V!!# 7a]LL \M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **N7a E'b& >V!!# 7a]LL \N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**O7a E'b& >V!!# 7a]LL \O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**P7a E'b& >V!!# 7a]LL \P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**Q7a E'b& >V!!# 7a]LL \Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(R7a E'b& >V!!# 7a]LL \R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@S7a E'b& >V!!# 7a]LL \S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0T7a E'b& >V!!# 7a]LL \T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttm0** U7a E'b& >V!!# 7a]LL \U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** V7a E'b& >V!!# 7a]LL \V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **W7a E'b& >V!!# 7a]LL \W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**X7a E'b& >V!!# 7a]LL \X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Y7a E'b& >V!!# 7a]LL \Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Z(7 E'b& >V!!# (7kOsDssD Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **[(7 E'b& >V!!# (7kOsDssD [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\(7 E'b& >V!!# (7kOsDssD \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**](7 E'b& >V!!# (7kOsDssD ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^(7 E'b& >V!!# (7kOsDssD ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0@ **_(7 E'b& >V!!# (7kOsDssD _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**`(7 E'b& >V!!# (7kOsDssD ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**a(7 E'b& >V!!# (7kOsDssD a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0b(7 E'b& >V!!# (7kOsDssD b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**c(7 E'b& >V!!# (7kOsDssD c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**d(7 E'b& >V!!# (7kOsDssD d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**e(7 E'b& >V!!# (7kOsDssD e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**f(7 E'b& >V!!# (7kOsDssD f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** g(7 E'b& >V!!# (7kOsDssD g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **h(7 E'b& >V!!# (7kOsDssD h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**i(7 E'b& >V!!# (7kOsDssD i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**j(7 E'b& >V!!# (7kOsDssD j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**k(7 E'b& >V!!# (7kOsDssD k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(l(7 E'b& >V!!# (7kOsDssD l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@m(7 E'b& >V!!# (7kOsDssD m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0n(7 E'b& >V!!# (7kOsDssD n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** o(7 E'b& >V!!# (7kOsDssD o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** p(7 E'b& >V!!# (7kOsDssD p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **q(7 E'b& >V!!# (7kOsDssD q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**r(7 E'b& >V!!# (7kOsDssD r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(s(7 E'b& >V!!# (7kOsDssD s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** tՂ;: E'b& >V!!# Ղ;:kOsDsDP d t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **uՂ;: E'b& >V!!# Ղ;:kOsDsDP d u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**vՂ;: E'b& >V!!# Ղ;:kOsDsDP d v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wՂ;: E'b& >V!!# Ղ;:kOsDsDP d w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** xՂ;: E'b& >V!!# Ղ;:kOsDsDP d x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0Ģ **yՂ;: E'b& >V!!# Ղ;:kOsDsDP d y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**zՂ;: E'b& >V!!# Ղ;:kOsDsDP d z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**{Ղ;: E'b& >V!!# Ղ;:kOsDsDP d { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0|Ղ;: E'b& >V!!# Ղ;:kOsDsDP d | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**}Ղ;: E'b& >V!!# Ղ;:kOsDsDP d } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**~Ղ;: E'b& >V!!# Ղ;:kOsDsDP d ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&P C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Ղ;: E'b& >V!!# Ղ;:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** ,=: E'b& >V!!# ,=:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **,=: E'b& >V!!# ,=:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,=: E'b& >V!!# ,=:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(,=: E'b& >V!!# ,=:kOsDsDP d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tP C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** +; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** +; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** +; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** +; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** +; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM1 **+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(+; E'b& >V!!# +;kOsDʁsD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0d} ** E'b& >V!!# k.ʣ.0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y@ E'b& >V>V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .