ElfFile LB*ElfChnk..X_Dl=f?mMF%'&**.p2,Əf E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# p2,Əf2pIfIf4  . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l.** /p2,Əf E'b& >V!!# p2,Əf2pIfIf4  / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l **0p2,Əf E'b& >V!!# p2,Əf2pIfIf4  0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1i**1p2,Əf E'b& >V!!# p2,Əf2pIfIf4  1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+i**2p2,Əf E'b& >V!!# p2,Əf2pIfIf4  2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**3p2,Əf E'b& >V!!# p2,Əf2pIfIf4  3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(4p2,Əf E'b& >V!!# p2,Əf2pIfIf4  4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyal(**@5p2,Əf E'b& >V!!# p2,Əf2pIfIf4  5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyt-Wi@**06p2,Əf E'b& >V!!# p2,Əf2pIfIf4  6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tttern0** 7p2,Əf E'b& >V!!# p2,Əf2pIfIf4  7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMndow ** 8p2,Əf E'b& >V!!# p2,Əf2pIfIf4  8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMs-In **9p2,Əf E'b& >V!!# p2,Əf2pIfIf4  9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6n**:p2,Əf E'b& >V!!# p2,Əf2pIfIf4  : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0n**(;p2,Əf E'b& >V!!# p2,Əf2pIfIf4  ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyo(**@<HZǏf E'b& >V!!# HZǏf2pIf+IfL< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%'6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**=HZǏf E'b& >V!!# HZǏf2pIf+IfL= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**>HZǏf E'b& >V!!# HZǏf2pIf+IfL> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?HZǏf E'b& >V!!# HZǏf2pIf+IfL? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @HZǏf E'b& >V!!# HZǏf2pIf+IfL@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **AHZǏf E'b& >V!!# HZǏf2pIf+IfLA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**BHZǏf E'b& >V!!# HZǏf2pIf+IfLB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**CHZǏf E'b& >V!!# HZǏf2pIf+IfLC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0DHZǏf E'b& >V!!# HZǏf2pIf+IfLD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789|0**EHZǏf E'b& >V!!# HZǏf2pIf+IfLE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**FHZǏf E'b& >V!!# HZǏf2pIf+IfLF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**GHZǏf E'b& >V!!# HZǏf2pIf+IfLG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**HHZǏf E'b& >V!!# HZǏf2pIf+IfLH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** IHZǏf E'b& >V!!# HZǏf2pIf+IfLI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **JHZǏf E'b& >V!!# HZǏf2pIf+IfLJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**KHZǏf E'b& >V!!# HZǏf2pIf+IfLK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**LHZǏf E'b& >V!!# HZǏf2pIf+IfLL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**MHZǏf E'b& >V!!# HZǏf2pIf+IfLM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(NHZǏf E'b& >V!!# HZǏf2pIf+IfLN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@OHZǏf E'b& >V!!# HZǏf2pIf+IfLO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0PHZǏf E'b& >V!!# HZǏf2pIf+IfLP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** QHZǏf E'b& >V!!# HZǏf2pIf+IfLQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** RHZǏf E'b& >V!!# HZǏf2pIf+IfLR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **SHZǏf E'b& >V!!# HZǏf2pIf+IfLS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**THZǏf E'b& >V!!# HZǏf2pIf+IfLT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(UHZǏf E'b& >V!!# HZǏf2pIf+IfLU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** V&}!h E'b& >V!!# &}!h/$h$$h V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **W&}!h E'b& >V!!# &}!h/$h$$h W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**X&}!h E'b& >V!!# &}!h/$h$$h X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Y&}!h E'b& >V!!# &}!h/$h$$h Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Z&}!h E'b& >V!!# &}!h/$h$$h Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **[&}!h E'b& >V!!# &}!h/$h$$h [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**\&}!h E'b& >V!!# &}!h/$h$$h \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**]&}!h E'b& >V!!# &}!h/$h$$h ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0^&}!h E'b& >V!!# &}!h/$h$$h ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789k0**_&}!h E'b& >V!!# &}!h/$h$$h _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**`&}!h E'b& >V!!# &}!h/$h$$h ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**a&}!h E'b& >V!!# &}!h/$h$$h a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**b&}!h E'b& >V!!# &}!h/$h$$h b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** c&}!h E'b& >V!!# &}!h/$h$$h c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **d&}!h E'b& >V!!# &}!h/$h$$h d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**e&}!h E'b& >V!!# &}!h/$h$$h e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**f&}!h E'b& >V!!# &}!h/$h$$h f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**g&}!h E'b& >V!!# &}!h/$h$$h g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(h&}!h E'b& >V!!# &}!h/$h$$h h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@i&}!h E'b& >V!!# &}!h/$h$$h i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0j&}!h E'b& >V!!# &}!h/$h$$h j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** k&}!h E'b& >V!!# &}!h/$h$$h k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** l&}!h E'b& >V!!# &}!h/$h$$h l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **m&}!h E'b& >V!!# &}!h/$h$$h m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**n&}!h E'b& >V!!# &}!h/$h$$h n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(o&}!h E'b& >V!!# &}!h/$h$$h o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** p~#h E'b& >V!!# ~#h/$hb$hxp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USxC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **q~#h E'b& >V!!# ~#h/$hb$hxq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**r~#h E'b& >V!!# ~#h/$hb$hxr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**s~#h E'b& >V!!# ~#h/$hb$hxs ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** t~#h E'b& >V!!# ~#h/$hb$hxt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **u~#h E'b& >V!!# ~#h/$hb$hxu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**v~#h E'b& >V!!# ~#h/$hb$hxv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**w~#h E'b& >V!!# ~#h/$hb$hxw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0x~#h E'b& >V!!# ~#h/$hb$hxx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567896H^0**y~#h E'b& >V!!# ~#h/$hb$hxy ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**z~#h E'b& >V!!# ~#h/$hb$hxz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**{~#h E'b& >V!!# ~#h/$hb$hx{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**|~#h E'b& >V!!# ~#h/$hb$hx| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** }~#h E'b& >V!!# ~#h/$hb$hx} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **~~#h E'b& >V!!# ~#h/$hb$hx~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&xC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(~#h E'b& >V!!# ~#h/$hb$hx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789.0**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk)o3IDl=f?mMF &**L3$h E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0l.**(L3$h E'b& >V!!# L3$h/$h{$h  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(tT>k E'b& >V!!# tT>k2+k\k  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ,V>k E'b& >V!!# ,V>k2+k:]k4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **,V>k E'b& >V!!# ,V>k2+k:]k4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,V>k E'b& >V!!# ,V>k2+k:]k4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,V>k E'b& >V!!# ,V>k2+k:]k4  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** µ,V>k E'b& >V!!# ,V>k2+k:]k4 µ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **õ,V>k E'b& >V!!# ,V>k2+k:]k4 õ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**ĵ,V>k E'b& >V!!# ,V>k2+k:]k4 ĵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**ŵ,V>k E'b& >V!!# ,V>k2+k:]k4 ŵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0Ƶ,V>k E'b& >V!!# ,V>k2+k:]k4 Ƶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**ǵ,V>k E'b& >V!!# ,V>k2+k:]k4 ǵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**ȵ,V>k E'b& >V!!# ,V>k2+k:]k4 ȵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**ɵ,V>k E'b& >V!!# ,V>k2+k:]k4 ɵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**ʵ,V>k E'b& >V!!# ,V>k2+k:]k4 ʵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ˵,V>k E'b& >V!!# ,V>k2+k:]k4 ˵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **̵,V>k E'b& >V!!# ,V>k2+k:]k4 ̵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**͵,V>k E'b& >V!!# ,V>k2+k:]k4 ͵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**ε,V>k E'b& >V!!# ,V>k2+k:]k4 ε ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**ϵ,V>k E'b& >V!!# ,V>k2+k:]k4 ϵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(е,V>k E'b& >V!!# ,V>k2+k:]k4 е ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@ѵ,V>k E'b& >V!!# ,V>k2+k:]k4 ѵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0ҵ,V>k E'b& >V!!# ,V>k2+k:]k4 ҵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** ӵ,V>k E'b& >V!!# ,V>k2+k:]k4 ӵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** Ե,V>k E'b& >V!!# ,V>k2+k:]k4 Ե ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **յ,V>k E'b& >V!!# ,V>k2+k:]k4 յ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ֵ,V>k E'b& >V!!# ,V>k2+k:]k4 ֵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(׵,V>k E'b& >V!!# ,V>k2+k:]k4 ׵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** صW>k E'b& >V!!# W>k2+kS]k` ص ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ٵW>k E'b& >V!!# W>k2+kS]k` ٵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ڵW>k E'b& >V!!# W>k2+kS]k` ڵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**۵W>k E'b& >V!!# W>k2+kS]k` ۵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ܵW>k E'b& >V!!# W>k2+kS]k` ܵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **ݵW>k E'b& >V!!# W>k2+kS]k` ݵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**޵W>k E'b& >V!!# W>k2+kS]k` ޵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**ߵW>k E'b& >V!!# W>k2+kS]k` ߵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(W>k E'b& >V!!# W>k2+kS]k`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t` C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 ** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( ]m E'b& >V!!# ]mb"\mC"\md  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  ]4m E'b& >V!!# ]4mb"\m"\m  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** ]4m E'b& >V!!# ]4mb"\m"\m  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0owershell.ex E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk|zDl=f?mMFU+&**]4m E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2l.**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@]4m E'b& >V!!# ]4mb"\m"\m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0 ]4m E'b& >V!!# ]4mb"\m"\m  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** !]4m E'b& >V!!# ]4mb"\m"\m! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** "]4m E'b& >V!!# ]4mb"\m"\m" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **#]4m E'b& >V!!# ]4mb"\m"\m# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**$]4m E'b& >V!!# ]4mb"\m"\m$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(%]4m E'b& >V!!# ]4mb"\m"\m% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@&@xm E'b& >V!!# @xmb"\m"\m & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**'@xm E'b& >V!!# @xmb"\m"\m ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(@xm E'b& >V!!# @xmb"\m"\m ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**)@xm E'b& >V!!# @xmb"\m"\m ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** *@xm E'b& >V!!# @xmb"\m"\m * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **+@xm E'b& >V!!# @xmb"\m"\m + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,@xm E'b& >V!!# @xmb"\m"\m , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**-@xm E'b& >V!!# @xmb"\m"\m - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0.@xm E'b& >V!!# @xmb"\m"\m . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**/@xm E'b& >V!!# @xmb"\m"\m / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**0@xm E'b& >V!!# @xmb"\m"\m 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1@xm E'b& >V!!# @xmb"\m"\m 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**2@xm E'b& >V!!# @xmb"\m"\m 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 3@xm E'b& >V!!# @xmb"\m"\m 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **4@xm E'b& >V!!# @xmb"\m"\m 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**5@xm E'b& >V!!# @xmb"\m"\m 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**6@xm E'b& >V!!# @xmb"\m"\m 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**7@xm E'b& >V!!# @xmb"\m"\m 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(8@xm E'b& >V!!# @xmb"\m"\m 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@9@xm E'b& >V!!# @xmb"\m"\m 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyk@**0:@xm E'b& >V!!# @xmb"\m"\m : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttk0** ;@xm E'b& >V!!# @xmb"\m"\m ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** <@xm E'b& >V!!# @xmb"\m"\m < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **=@xm E'b& >V!!# @xmb"\m"\m = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**>@xm E'b& >V!!# @xmb"\m"\m > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(?@xm E'b& >V!!# @xmb"\m"\m ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** @}y(o E'b& >V!!# }y(ot|o\|o x @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **A}y(o E'b& >V!!# }y(ot|o\|o x A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**B}y(o E'b& >V!!# }y(ot|o\|o x B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**C}y(o E'b& >V!!# }y(ot|o\|o x C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** D}y(o E'b& >V!!# }y(ot|o\|o x D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **E}y(o E'b& >V!!# }y(ot|o\|o x E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**F}y(o E'b& >V!!# }y(ot|o\|o x F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**G}y(o E'b& >V!!# }y(ot|o\|o x G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0H}y(o E'b& >V!!# }y(ot|o\|o x H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**I}y(o E'b& >V!!# }y(ot|o\|o x I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**J}y(o E'b& >V!!# }y(ot|o\|o x J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**K}y(o E'b& >V!!# }y(ot|o\|o x K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**L}y(o E'b& >V!!# }y(ot|o\|o x L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** M}y(o E'b& >V!!# }y(ot|o\|o x M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **N}y(o E'b& >V!!# }y(ot|o\|o x N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**O}y(o E'b& >V!!# }y(ot|o\|o x O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**P}y(o E'b& >V!!# }y(ot|o\|o x P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Q}y(o E'b& >V!!# }y(ot|o\|o x Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(R}y(o E'b& >V!!# }y(ot|o\|o x R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@S}y(o E'b& >V!!# }y(ot|o\|o x S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyk@**0T}y(o E'b& >V!!# }y(ot|o\|o x T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttk0** U}y(o E'b& >V!!# }y(ot|o\|o x U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** V}y(o E'b& >V!!# }y(ot|o\|o x V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **W}y(o E'b& >V!!# }y(ot|o\|o x W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**X}y(o E'b& >V!!# }y(ot|o\|o x X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Y}y(o E'b& >V!!# }y(ot|o\|o x Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Z+o E'b& >V!!# +ot|o|o Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **[+o E'b& >V!!# +ot|o|o [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\+o E'b& >V!!# +ot|o|o \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**]+o E'b& >V!!# +ot|o|o ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ^+o E'b& >V!!# +ot|o|o ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **_+o E'b& >V!!# +ot|o|o _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**`+o E'b& >V!!# +ot|o|o ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**a+o E'b& >V!!# +ot|o|o a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0b+o E'b& >V!!# +ot|o|o b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**c+o E'b& >V!!# +ot|o|o c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**d+o E'b& >V!!# +ot|o|o d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**e+o E'b& >V!!# +ot|o|o e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**f+o E'b& >V!!# +ot|o|o f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** g+o E'b& >V!!# +ot|o|o g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **h+o E'b& >V!!# +ot|o|o h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**i+o E'b& >V!!# +ot|o|o i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**j+o E'b& >V!!# +ot|o|o j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**k+o E'b& >V!!# +ot|o|o k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(l+o E'b& >V!!# +ot|o|o l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@m+o E'b& >V!!# +ot|o|o m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyym@**0n+o E'b& >V!!# +ot|o|o n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttm0** o+o E'b& >V!!# +ot|o|o o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** p+o E'b& >V!!# +ot|o|o p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **q+o E'b& >V!!# +ot|o|o q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**r+o E'b& >V!!# +ot|o|o r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(s+o E'b& >V!!# +ot|o|o s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ti#zo E'b& >V!!# i#zot|o|oL t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ui#zo E'b& >V!!# i#zot|o|oL u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**vi#zo E'b& >V!!# i#zot|o|oL v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**wi#zo E'b& >V!!# i#zot|o|oL w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** xi#zo E'b& >V!!# i#zot|o|oL x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **yi#zo E'b& >V!!# i#zot|o|oL y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**zi#zo E'b& >V!!# i#zot|o|oL z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**{i#zo E'b& >V!!# i#zot|o|oL { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0|i#zo E'b& >V!!# i#zot|o|oL | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**}i#zo E'b& >V!!# i#zot|o|oL } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**~i#zo E'b& >V!!# i#zot|o|oL ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyym@**0i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttm0** i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b&  E'b& >VV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkpB=V+MoZDl=f?mMF&**i#zo E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM.**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(i#zo E'b& >V!!# i#zot|o|oL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(gGQr E'b& >V!!# gGQrGK!ryK!r  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** (GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** (GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** (GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**((GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&X C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** (GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** (GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**(GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**((GIQr E'b& >V!!# (GIQrGK!r>yK!rX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ¶IQr E'b& >V!!# IQrGK!rWyK!rT ¶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-UST C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **öIQr E'b& >V!!# IQrGK!rWyK!rT ö ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ĶIQr E'b& >V!!# IQrGK!rWyK!rT Ķ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ŶIQr E'b& >V!!# IQrGK!rWyK!rT Ŷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ƶIQr E'b& >V!!# IQrGK!rWyK!rT ƶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **ǶIQr E'b& >V!!# IQrGK!rWyK!rT Ƕ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**ȶIQr E'b& >V!!# IQrGK!rWyK!rT ȶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**ɶIQr E'b& >V!!# IQrGK!rWyK!rT ɶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0ʶIQr E'b& >V!!# IQrGK!rWyK!rT ʶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**˶IQr E'b& >V!!# IQrGK!rWyK!rT ˶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**̶IQr E'b& >V!!# IQrGK!rWyK!rT ̶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**ͶIQr E'b& >V!!# IQrGK!rWyK!rT Ͷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**ζIQr E'b& >V!!# IQrGK!rWyK!rT ζ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ϶IQr E'b& >V!!# IQrGK!rWyK!rT ϶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **жIQr E'b& >V!!# IQrGK!rWyK!rT ж ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**ѶIQr E'b& >V!!# IQrGK!rWyK!rT Ѷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**ҶIQr E'b& >V!!# IQrGK!rWyK!rT Ҷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**ӶIQr E'b& >V!!# IQrGK!rWyK!rT Ӷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(ԶIQr E'b& >V!!# IQrGK!rWyK!rT Զ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@նIQr E'b& >V!!# IQrGK!rWyK!rT ն ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&T C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0ֶIQr E'b& >V!!# IQrGK!rWyK!rT ֶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** ׶IQr E'b& >V!!# IQrGK!rWyK!rT ׶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** ضIQr E'b& >V!!# IQrGK!rWyK!rT ض ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **ٶIQr E'b& >V!!# IQrGK!rWyK!rT ٶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**ڶIQr E'b& >V!!# IQrGK!rWyK!rT ڶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(۶IQr E'b& >V!!# IQrGK!rWyK!rT ۶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tT C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ܶ[귴t E'b& >V!!# [귴tsntnt ܶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ݶ[귴t E'b& >V!!# [귴tsntnt ݶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**޶[귴t E'b& >V!!# [귴tsntnt ޶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**߶[귴t E'b& >V!!# [귴tsntnt ߶ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** [귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** [귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**([귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** [귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** [귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**[귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**([귴t E'b& >V!!# [귴tsntnt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-UStC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\.0\powershel E'b& >V!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkqqxAsDl=f?mMF/&**:4չt E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ter **:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1r**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+r**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /r**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :I**(:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyti(**@ :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyosof@**0 :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tts-In0**  :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMt-Wi **  :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMndow ** :4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6w**:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0w**(:4չt E'b& >V!!# :4չtsntntt  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ttC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyn(**@lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**lt E'b& >V!!# ltsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**yt E'b& >V!!# ytsntntX  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** yt E'b& >V!!# ytsntntX   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**!yt E'b& >V!!# ytsntntX ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**("yt E'b& >V!!# ytsntntX " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@#yt E'b& >V!!# ytsntntX # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&XC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0$yt E'b& >V!!# ytsntntX $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** %yt E'b& >V!!# ytsntntX % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** &yt E'b& >V!!# ytsntntX & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **'yt E'b& >V!!# ytsntntX ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**(yt E'b& >V!!# ytsntntX ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**()yt E'b& >V!!# ytsntntX ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** **hw E'b& >V!!# *hwx(vƣ(vd* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **+*hw E'b& >V!!# *hwx(vƣ(vd+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,*hw E'b& >V!!# *hwx(vƣ(vd, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**-*hw E'b& >V!!# *hwx(vƣ(vd- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** .*hw E'b& >V!!# *hwx(vƣ(vd. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **/*hw E'b& >V!!# *hwx(vƣ(vd/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**0*hw E'b& >V!!# *hwx(vƣ(vd0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**1*hw E'b& >V!!# *hwx(vƣ(vd1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**02*hw E'b& >V!!# *hwx(vƣ(vd2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**3*hw E'b& >V!!# *hwx(vƣ(vd3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**4*hw E'b& >V!!# *hwx(vƣ(vd4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**5*hw E'b& >V!!# *hwx(vƣ(vd5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6*hw E'b& >V!!# *hwx(vƣ(vd6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 7*hw E'b& >V!!# *hwx(vƣ(vd7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **8*hw E'b& >V!!# *hwx(vƣ(vd8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**9*hw E'b& >V!!# *hwx(vƣ(vd9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**:*hw E'b& >V!!# *hwx(vƣ(vd: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**;*hw E'b& >V!!# *hwx(vƣ(vd; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(<*hw E'b& >V!!# *hwx(vƣ(vd< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@=*hw E'b& >V!!# *hwx(vƣ(vd= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&dC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0>*hw E'b& >V!!# *hwx(vƣ(vd> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ?*hw E'b& >V!!# *hwx(vƣ(vd? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** @*hw E'b& >V!!# *hwx(vƣ(vd@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **A*hw E'b& >V!!# *hwx(vƣ(vdA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**B*hw E'b& >V!!# *hwx(vƣ(vdB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(C*hw E'b& >V!!# *hwx(vƣ(vdC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** DȀiw E'b& >V!!# Ȁiwx(v(v$D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **EȀiw E'b& >V!!# Ȁiwx(v(v$E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**FȀiw E'b& >V!!# Ȁiwx(v(v$F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**GȀiw E'b& >V!!# Ȁiwx(v(v$G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** HȀiw E'b& >V!!# Ȁiwx(v(v$H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **IȀiw E'b& >V!!# Ȁiwx(v(v$I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**JȀiw E'b& >V!!# Ȁiwx(v(v$J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**KȀiw E'b& >V!!# Ȁiwx(v(v$K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0LȀiw E'b& >V!!# Ȁiwx(v(v$L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ٶ0**MȀiw E'b& >V!!# Ȁiwx(v(v$M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**NȀiw E'b& >V!!# Ȁiwx(v(v$N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**OȀiw E'b& >V!!# Ȁiwx(v(v$O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**PȀiw E'b& >V!!# Ȁiwx(v(v$P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** QȀiw E'b& >V!!# Ȁiwx(v(v$Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **RȀiw E'b& >V!!# Ȁiwx(v(v$R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**SȀiw E'b& >V!!# Ȁiwx(v(v$S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**TȀiw E'b& >V!!# Ȁiwx(v(v$T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**UȀiw E'b& >V!!# Ȁiwx(v(v$U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(VȀiw E'b& >V!!# Ȁiwx(v(v$V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@WȀiw E'b& >V!!# Ȁiwx(v(v$W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0XȀiw E'b& >V!!# Ȁiwx(v(v$X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** YȀiw E'b& >V!!# Ȁiwx(v(v$Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ZȀiw E'b& >V!!# Ȁiwx(v(v$Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **[Ȁiw E'b& >V!!# Ȁiwx(v(v$[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**\Ȁiw E'b& >V!!# Ȁiwx(v(v$\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(]Ȁiw E'b& >V!!# Ȁiwx(v(v$] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ^~jw E'b& >V!!# ~jwx(v(v ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **_~jw E'b& >V!!# ~jwx(v(v _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**`~jw E'b& >V!!# ~jwx(v(v ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**a~jw E'b& >V!!# ~jwx(v(v a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** b~jw E'b& >V!!# ~jwx(v(v b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **c~jw E'b& >V!!# ~jwx(v(v c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**d~jw E'b& >V!!# ~jwx(v(v d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**e~jw E'b& >V!!# ~jwx(v(v e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0f~jw E'b& >V!!# ~jwx(v(v f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**g~jw E'b& >V!!# ~jwx(v(v g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**h~jw E'b& >V!!# ~jwx(v(v h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**i~jw E'b& >V!!# ~jwx(v(v i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**j~jw E'b& >V!!# ~jwx(v(v j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** k~jw E'b& >V!!# ~jwx(v(v k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **l~jw E'b& >V!!# ~jwx(v(v l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**m~jw E'b& >V!!# ~jwx(v(v m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**n~jw E'b& >V!!# ~jwx(v(v n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**o~jw E'b& >V!!# ~jwx(v(v o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(p~jw E'b& >V!!# ~jwx(v(v p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@q~jw E'b& >V!!# ~jwx(v(v q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@ E'b& >V  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkrrmaVDl=f?mMF&**r~jw E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ~jwx(v(v r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt** s~jw E'b& >V!!# ~jwx(v(v s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** t~jw E'b& >V!!# ~jwx(v(v t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **u~jw E'b& >V!!# ~jwx(v(v u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**v~jw E'b& >V!!# ~jwx(v(v v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(w~jw E'b& >V!!# ~jwx(v(v w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@xkC`cy E'b& >V!!# kC`cy8ʝ%yʝ%yx ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exes-In@**ykC`cy E'b& >V!!# kC`cy8ʝ%yʝ%yy ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2n**zkC`cy E'b& >V!!# kC`cy8ʝ%yʝ%yz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .n**{kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,n** |kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **}kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**~kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0r**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $I**0kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789nati0**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .I**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l** kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(kC`cy E'b& >V!!# kC`cy8ʝ%yʝ%y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0y **febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM5 **febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(febcy E'b& >V!!# febcy8ʝ%yʝ%y(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyh(** (ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** (ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0*h **(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** (ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**((ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttٶ0** (ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** ·(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8· ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMO **÷(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8÷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ķ(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8ķ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ŷ(ccy E'b& >V!!# (ccy8ʝ%yʝ%y 8ŷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyi(** ƷƩ{ E'b& >V!!# Ʃ{ZW{ȏ{ Ʒ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ǷƩ{ E'b& >V!!# Ʃ{ZW{ȏ{ Ƿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ȷƩ{ E'b& >V!!# Ʃ{ZW{ȏ{ ȷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ɷƩ{ E'b& >V!!# Ʃ{ZW{ȏ{ ɷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ʷƩ{ E'b& >V!!# Ʃ{ZW{ȏ{ ʷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0Ȁi **˷{ E'b& >V!!# {ZW{ȏ{ ˷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**̷{ E'b& >V!!# {ZW{ȏ{ ̷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ͷ{ E'b& >V!!# {ZW{ȏ{ ͷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0ηK{ E'b& >V!!# K{ZW{ȏ{ η ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**ϷK{ E'b& >V!!# K{ZW{ȏ{ Ϸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**зK{ E'b& >V!!# K{ZW{ȏ{ з ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ѷK{ E'b& >V!!# K{ZW{ȏ{ ѷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ҷK{ E'b& >V!!# K{ZW{ȏ{ ҷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** ӷK{ E'b& >V!!# K{ZW{ȏ{ ӷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **ԷK{ E'b& >V!!# K{ZW{ȏ{ Է ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**շK{ E'b& >V!!# K{ZW{ȏ{ շ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**ַK{ E'b& >V!!# K{ZW{ȏ{ ַ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**׷K{ E'b& >V!!# K{ZW{ȏ{ ׷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(طK{ E'b& >V!!# K{ZW{ȏ{ ط ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ٷK{ E'b& >V!!# K{ZW{ȏ{ ٷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0ڷ(<{ E'b& >V!!# (<{ZW{ȏ{ ڷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ۷(<{ E'b& >V!!# (<{ZW{ȏ{ ۷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** ܷ(<{ E'b& >V!!# (<{ZW{ȏ{ ܷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMi **ݷ(<{ E'b& >V!!# (<{ZW{ȏ{ ݷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**޷(<{ E'b& >V!!# (<{ZW{ȏ{ ޷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(߷(<{ E'b& >V!!# (<{ZW{ȏ{ ߷ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyj(** y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0~j **y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y@ E'b& >V>V  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkYYp!oe&XDl=f?mMF3&**y { E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m:**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W **y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1W**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+W**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /W**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :o**(y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyydo(**@y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy+:Wc@**0y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttosof0** y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM.?w ** y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMMicr **y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6r**y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0r**(y { E'b& >V!!# y {ZW{{ `  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyi(**@*!{ E'b& >V!!# *!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ236Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**09*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** 9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.** 9*!{ E'b& >V!!# 9*!{ZW{{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.** 9*!{ E'b& >V!!# 9*!{ZW{{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.** 9*!{ E'b& >V!!# 9*!{ZW{{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**( 9*!{ E'b& >V!!# 9*!{ZW{{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@ 9*!{ E'b& >V!!# 9*!{ZW{{  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyfeb@**09*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttfeb0** 9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMy ** 9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(9*!{ E'b& >V!!# 9*!{ZW{{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** \~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** \~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**\~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** \~ E'b& >V!!# \~x}x}  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** !\~ E'b& >V!!# \~x}x} ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **"\~ E'b& >V!!# \~x}x} " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**#\~ E'b& >V!!# \~x}x} # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**$\~ E'b& >V!!# \~x}x} $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**%\~ E'b& >V!!# \~x}x} % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(&\~ E'b& >V!!# \~x}x} & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@'\~ E'b& >V!!# \~x}x} ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy(c@**0(\~ E'b& >V!!# \~x}x} ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt(c0** )\~ E'b& >V!!# \~x}x} ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMy ** *\~ E'b& >V!!# \~x}x} * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **+\~ E'b& >V!!# \~x}x} + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,\~ E'b& >V!!# \~x}x} , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(-\~ E'b& >V!!# \~x}x} - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** .O~ E'b& >V!!# O~x}/x} . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **/O~ E'b& >V!!# O~x}/x} / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**0O~ E'b& >V!!# O~x}/x} 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**1O~ E'b& >V!!# O~x}/x} 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2O~ E'b& >V!!# O~x}/x} 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **3O~ E'b& >V!!# O~x}/x} 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**4O~ E'b& >V!!# O~x}/x} 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **5O~ E'b& >V!!# O~x}/x} 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**06O~ E'b& >V!!# O~x}/x} 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**7O~ E'b& >V!!# O~x}/x} 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**8O~ E'b& >V!!# O~x}/x} 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9O~ E'b& >V!!# O~x}/x} 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:O~ E'b& >V!!# O~x}/x} : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** ;O~ E'b& >V!!# O~x}/x} ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **<O~ E'b& >V!!# O~x}/x} < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**=O~ E'b& >V!!# O~x}/x} = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**>O~ E'b& >V!!# O~x}/x} > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**?O~ E'b& >V!!# O~x}/x} ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(@O~ E'b& >V!!# O~x}/x} @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@AO~ E'b& >V!!# O~x}/x} A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyK@**0BO~ E'b& >V!!# O~x}/x} B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttK0** CO~ E'b& >V!!# O~x}/x} C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM{ ** DO~ E'b& >V!!# O~x}/x} D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **EO~ E'b& >V!!# O~x}/x} E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**FO~ E'b& >V!!# O~x}/x} F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(GO~ E'b& >V!!# O~x}/x} G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** H^~ E'b& >V!!# ^~x}Hx}, H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **I^~ E'b& >V!!# ^~x}Hx}, I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**J^~ E'b& >V!!# ^~x}Hx}, J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**K^~ E'b& >V!!# ^~x}Hx}, K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** L^~ E'b& >V!!# ^~x}Hx}, L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **M^~ E'b& >V!!# ^~x}Hx}, M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**N^~ E'b& >V!!# ^~x}Hx}, N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **O^~ E'b& >V!!# ^~x}Hx}, O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0P^~ E'b& >V!!# ^~x}Hx}, P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**Q^~ E'b& >V!!# ^~x}Hx}, Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**R^~ E'b& >V!!# ^~x}Hx}, R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**S^~ E'b& >V!!# ^~x}Hx}, S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**T^~ E'b& >V!!# ^~x}Hx}, T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** U^~ E'b& >V!!# ^~x}Hx}, U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **V^~ E'b& >V!!# ^~x}Hx}, V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**W^~ E'b& >V!!# ^~x}Hx}, W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**X^~ E'b& >V!!# ^~x}Hx}, X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**Y^~ E'b& >V!!# ^~x}Hx}, Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :hl.exe 0 E'b& >V!# ^~x}Hx}, Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkZ͸Z͸БODl=f?mMF&**Z^~ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ^~x}Hx}, Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy**@[^~ E'b& >V!!# ^~x}Hx}, [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0\^~ E'b& >V!!# ^~x}Hx}, \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ]^~ E'b& >V!!# ^~x}Hx}, ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ^^~ E'b& >V!!# ^~x}Hx}, ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **_^~ E'b& >V!!# ^~x}Hx}, _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**`^~ E'b& >V!!# ^~x}Hx}, ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(a^~ E'b& >V!!# ^~x}Hx}, a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@bwXu E'b& >V!!# wXu8: 8`\ b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**cwXu E'b& >V!!# wXu8: 8`\ c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**dwXu E'b& >V!!# wXu8: 8`\ d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ewXu E'b& >V!!# wXu8: 8`\ e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** fwXu E'b& >V!!# wXu8: 8`\ f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **gwXu E'b& >V!!# wXu8: 8`\ g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**hwXu E'b& >V!!# wXu8: 8`\ h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**iwXu E'b& >V!!# wXu8: 8`\ i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0jwXu E'b& >V!!# wXu8: 8`\ j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**kwXu E'b& >V!!# wXu8: 8`\ k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**lwXu E'b& >V!!# wXu8: 8`\ l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**mwXu E'b& >V!!# wXu8: 8`\ m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f**nwXu E'b& >V!!# wXu8: 8`\ n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** owXu E'b& >V!!# wXu8: 8`\ o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **pwXu E'b& >V!!# wXu8: 8`\ p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**qwXu E'b& >V!!# wXu8: 8`\ q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**rwXu E'b& >V!!# wXu8: 8`\ r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**swXu E'b& >V!!# wXu8: 8`\ s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(twXu E'b& >V!!# wXu8: 8`\ t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@uwXu E'b& >V!!# wXu8: 8`\ u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0vwXu E'b& >V!!# wXu8: 8`\ v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** wwXu E'b& >V!!# wXu8: 8`\ w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** xwXu E'b& >V!!# wXu8: 8`\ x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ywXu E'b& >V!!# wXu8: 8`\ y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**zwXu E'b& >V!!# wXu8: 8`\ z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**({wXu E'b& >V!!# wXu8: 8`\ { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** |Ayu E'b& >V!!# Ayu8x 8p | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **}Ayu E'b& >V!!# Ayu8x 8p } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**~Ayu E'b& >V!!# Ayu8x 8p ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567899*!0**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-!**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2!**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Ayu E'b& >V!!# Ayu8x 8p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\0**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Iu E'b& >V!!# Iu8 8x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789O0**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ق E'b& >V!!# ق$J󛓂Ȃ󛓂< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(¸ق E'b& >V!!# ق$J󛓂Ȃ󛓂<¸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@øق E'b& >V!!# ق$J󛓂Ȃ󛓂<ø ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ĸق E'b& >V!!# ق$J󛓂Ȃ󛓂<ĸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Ÿق E'b& >V!!# ق$J󛓂Ȃ󛓂<Ÿ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Ƹق E'b& >V!!# ق$J󛓂Ȃ󛓂<Ƹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Ǹق E'b& >V!!# ق$J󛓂Ȃ󛓂<Ǹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ȸق E'b& >V!!# ق$J󛓂Ȃ󛓂<ȸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ɸق E'b& >V!!# ق$J󛓂Ȃ󛓂<ɸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ʸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ʸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **˸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ˸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**̸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ̸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**͸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ͸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,>V E'b& >VMicrosoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkθAθAxjJ+E=Dl=f?mMF8&**θӵق E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ӵق$J󛓂󛓂4 , θ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy**ϸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ϸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**иӵق E'b& >V!!# ӵق$J󛓂󛓂4 , и ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**Ѹӵق E'b& >V!!# ӵق$J󛓂󛓂4 , Ѹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0Ҹӵق E'b& >V!!# ӵق$J󛓂󛓂4 , Ҹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**Ӹӵق E'b& >V!!# ӵق$J󛓂󛓂4 , Ӹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**Ըӵق E'b& >V!!# ӵق$J󛓂󛓂4 , Ը ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ոӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ո ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ָӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ָ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** ׸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ׸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 c **ظӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ظ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ٸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ٸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ڸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ڸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**۸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ۸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ܸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ܸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ݸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ݸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0޸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ޸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** ߸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ߸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ286Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3**  yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow ** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0 9$l% E'b& >V!!# 9$l%23(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**!9$l% E'b& >V!!# 9$l%23(! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**"9$l% E'b& >V!!# 9$l%23(" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**#9$l% E'b& >V!!# 9$l%23(# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**$9$l% E'b& >V!!# 9$l%23($ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** %9$l% E'b& >V!!# 9$l%23(% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **&9$l% E'b& >V!!# 9$l%23(& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**'9$l% E'b& >V!!# 9$l%23(' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**(9$l% E'b& >V!!# 9$l%23(( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**)9$l% E'b& >V!!# 9$l%23() ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(*9$l% E'b& >V!!# 9$l%23(* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@+9$l% E'b& >V!!# 9$l%23(+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0,9$l% E'b& >V!!# 9$l%23(, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** -9$l% E'b& >V!!# 9$l%23(- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** .9$l% E'b& >V!!# 9$l%23(. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **/9$l% E'b& >V!!# 9$l%23(/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**09$l% E'b& >V!!# 9$l%23(0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(19$l% E'b& >V!!# 9$l%23(1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 2l% E'b& >V!!# l%2*3L2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **3l% E'b& >V!!# l%2*3L3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**4l% E'b& >V!!# l%2*3L4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5l% E'b& >V!!# l%2*3L5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 6l% E'b& >V!!# l%2*3L6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **7l% E'b& >V!!# l%2*3L7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**8l% E'b& >V!!# l%2*3L8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**9l% E'b& >V!!# l%2*3L9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0:l% E'b& >V!!# l%2*3L: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**;l% E'b& >V!!# l%2*3L; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**<l% E'b& >V!!# l%2*3L< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**=l% E'b& >V!!# l%2*3L= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**>l% E'b& >V!!# l%2*3L> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ?l% E'b& >V!!# l%2*3L? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **@l% E'b& >V!!# l%2*3L@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**Al% E'b& >V!!# l%2*3LA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+wowerShell\v1 E'b& >VE'b!# l%2*3LB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkBKBK H W 1Dl=f?mMF&**Bl% E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# l%2*3LB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Cl% E'b& >V!!# l%2*3LC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Dl% E'b& >V!!# l%2*3LD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@El% E'b& >V!!# l%2*3LE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&LC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Fl% E'b& >V!!# l%2*3LF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Gl% E'b& >V!!# l%2*3LG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Hl% E'b& >V!!# l%2*3LH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Il% E'b& >V!!# l%2*3LI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Jl% E'b& >V!!# l%2*3LJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Kl% E'b& >V!!# l%2*3LK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy( >V!!# ӵق$J󛓂󛓂4 , ظ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ٸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ٸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ڸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ڸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**۸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ۸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ܸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ܸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ݸӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ݸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0޸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ޸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** ߸ӵق E'b& >V!!# ӵق$J󛓂󛓂4 , ߸ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(ӵق E'b& >V!!# ӵق$J󛓂󛓂4 ,  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ286Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(N¶ق E'b& >V!!# N¶ق$J󛓂󛓂   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3**  yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow ** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(yj% E'b& >V!!# yj%23  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**9$l% E'b& >V!!# 9$l%23( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0 9$l% E'b& >V!!# 9$l%23(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**!9$l% E'b& >V!!# 9$l%23(! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**"9$l% E'b& >V!!# 9$l%23(" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**#9$l% E'b& >V!!# 9$l%23(# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**$9$l% E'b& >V!!# 9$l%23($ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** %9$l% E'b& >V!!# 9$l%23(% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **&9$l% E'b& >V!!# 9$l%23(& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**'9$l% E'b& >V!!# 9$l%23(' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**(9$l% E'b& >V!!# 9$l%23(( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**)9$l% E'b& >V!!# 9$l%23() ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(*9$l% E'b& >V!!# 9$l%23(* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@+9$l% E'b& >V!!# 9$l%23(+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0,9$l% E'b& >V!!# 9$l%23(, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** -9$l% E'b& >V!!# 9$l%23(- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** .9$l% E'b& >V!!# 9$l%23(. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **/9$l% E'b& >V!!# 9$l%23(/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**09$l% E'b& >V!!# 9$l%23(0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(19$l% E'b& >V!!# 9$l%23(1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 2l% E'b& >V!!# l%2*3L2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **3l% E'b& >V!!# l%2*3L3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**4l% E'b& >V!!# l%2*3L4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**5l% E'b& >V!!# l%2*3L5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 6l% E'b& >V!!# l%2*3L6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **7l% E'b& >V!!# l%2*3L7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**8l% E'b& >V!!# l%2*3L8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**9l% E'b& >V!!# l%2*3L9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0:l% E'b& >V!!# l%2*3L: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**;l% E'b& >V!!# l%2*3L; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**<l% E'b& >V!!# l%2*3L< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**=l% E'b& >V!!# l%2*3L= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**>l% E'b& >V!!# l%2*3L> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ?l% E'b& >V!!# l%2*3L? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **@l% E'b& >V!!# l%2*3L@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**Al% E'b& >V!!# l%2*3LA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+wowerShell\v1 E'b& >VE'b!# l%2*3LB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkvv65rDl=f?mMF&**v*8XQ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# *8XQ‰,Q,QX v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy**@w*8XQ E'b& >V!!# *8XQ‰,Q,QX w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&X C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0x*8XQ E'b& >V!!# *8XQ‰,Q,QX x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** y*8XQ E'b& >V!!# *8XQ‰,Q,QX y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** z*8XQ E'b& >V!!# *8XQ‰,Q,QX z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **{*8XQ E'b& >V!!# *8XQ‰,Q,QX { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**|*8XQ E'b& >V!!# *8XQ‰,Q,QX | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(}*8XQ E'b& >V!!# *8XQ‰,Q,QX } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tX C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@~"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**("e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** "e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** "e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**"e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**("e9XQ E'b& >V!!# "e9XQ‰,Q,Q`p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USh C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ŪS E'b& >V!!# ŪSwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789Fb0** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&h C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **  S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( S E'b& >V!!#  SwmSmSh h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .th C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789 0**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**S E'b& >V!!# SwmSmS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**²S E'b& >V!!# SwmSmS² ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**òS E'b& >V!!# SwmSmSò ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(IJS E'b& >V!!# SwmSmSIJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ŲS E'b& >V!!# SwmSmSŲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ƲS E'b& >V!!# SwmSmSƲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** DzS E'b& >V!!# SwmSmSDz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ȲS E'b& >V!!# SwmSmSȲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ɲS E'b& >V!!# SwmSmSɲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ʲS E'b& >V!!# SwmSmSʲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(˲S E'b& >V!!# SwmSmS˲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ̲`wS E'b& >V!!# `wSwmSmS(̲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Ͳ`wS E'b& >V!!# `wSwmSmS(Ͳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**β`wS E'b& >V!!# `wSwmSmS(β ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ϲ`wS E'b& >V!!# `wSwmSmS(ϲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** в`wS E'b& >V!!# `wSwmSmS(в ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Ѳ`wS E'b& >V!!# `wSwmSmS(Ѳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ҳ`wS E'b& >V!!# `wSwmSmS(Ҳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ӳ`wS E'b& >V!!# `wSwmSmS(Ӳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Բ`wS E'b& >V!!# `wSwmSmS(Բ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789z60**ղ`wS E'b& >V!!# `wSwmSmS(ղ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-6**ֲ`wS E'b& >V!!# `wSwmSmS(ֲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 26**ײ`wS E'b& >V!!# `wSwmSmS(ײ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ز`wS E'b& >V!!# `wSwmSmS(ز ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ٲ`wS E'b& >V!!# `wSwmSmS(ٲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **ڲ`wS E'b& >V!!# `wSwmSmS(ڲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**۲`wS E'b& >V!!# `wSwmSmS(۲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ܲ`wS E'b& >V!!# `wSwmSmS(ܲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ݲ`wS E'b& >V!!# `wSwmSmS(ݲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(޲`wS E'b& >V!!# `wSwmSmS(޲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@߲`wS E'b& >V!!# `wSwmSmS(߲ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0`wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** `wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** `wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **`wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**`wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(`wS E'b& >V!!# `wSwmSmS( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** /V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,>V E'b& >VMicrosoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk]]xQrwNDl=f?mMF8&**/V E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** /V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&LC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** /V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** /V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(/V E'b& >V!!# /VD9+Uj+UL  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ286Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3**  N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(N}V E'b& >V!!# N}VD9+Uk+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **lV E'b& >V!!# lVD9+U'k+U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** lV E'b& >V!!# lVD9+U'k+U  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**!lV E'b& >V!!# lVD9+U'k+U! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0"lV E'b& >V!!# lVD9+U'k+U" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**#lV E'b& >V!!# lVD9+U'k+U# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**$lV E'b& >V!!# lVD9+U'k+U$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**%lV E'b& >V!!# lVD9+U'k+U% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**&lV E'b& >V!!# lVD9+U'k+U& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** 'lV E'b& >V!!# lVD9+U'k+U' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **(lV E'b& >V!!# lVD9+U'k+U( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**)lV E'b& >V!!# lVD9+U'k+U) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w***lV E'b& >V!!# lVD9+U'k+U* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**+lV E'b& >V!!# lVD9+U'k+U+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(,lV E'b& >V!!# lVD9+U'k+U, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@-lV E'b& >V!!# lVD9+U'k+U- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0.lV E'b& >V!!# lVD9+U'k+U. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** /lV E'b& >V!!# lVD9+U'k+U/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 0lV E'b& >V!!# lVD9+U'k+U0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **1lV E'b& >V!!# lVD9+U'k+U1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**2lV E'b& >V!!# lVD9+U'k+U2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(3lV E'b& >V!!# lVD9+U'k+U3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 4QjX E'b& >V!!# QjX<$X@ =$X4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5QjX E'b& >V!!# QjX<$X@ =$X5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6QjX E'b& >V!!# QjX<$X@ =$X6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**7QjX E'b& >V!!# QjX<$X@ =$X7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 8QjX E'b& >V!!# QjX<$X@ =$X8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **9QjX E'b& >V!!# QjX<$X@ =$X9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:QjX E'b& >V!!# QjX<$X@ =$X: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**;QjX E'b& >V!!# QjX<$X@ =$X; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0<QjX E'b& >V!!# QjX<$X@ =$X< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**=QjX E'b& >V!!# QjX<$X@ =$X= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**>QjX E'b& >V!!# QjX<$X@ =$X> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**?QjX E'b& >V!!# QjX<$X@ =$X? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**@QjX E'b& >V!!# QjX<$X@ =$X@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** AQjX E'b& >V!!# QjX<$X@ =$XA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **BQjX E'b& >V!!# QjX<$X@ =$XB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**CQjX E'b& >V!!# QjX<$X@ =$XC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**DQjX E'b& >V!!# QjX<$X@ =$XD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**EQjX E'b& >V!!# QjX<$X@ =$XE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(FQjX E'b& >V!!# QjX<$X@ =$XF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@GQjX E'b& >V!!# QjX<$X@ =$XG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0HQjX E'b& >V!!# QjX<$X@ =$XH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** IQjX E'b& >V!!# QjX<$X@ =$XI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** JQjX E'b& >V!!# QjX<$X@ =$XJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **KQjX E'b& >V!!# QjX<$X@ =$XK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**LQjX E'b& >V!!# QjX<$X@ =$XL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(MQjX E'b& >V!!# QjX<$X@ =$XM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** NӰjX E'b& >V!!# ӰjX<$X~ =$X8 N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-US8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **OӰjX E'b& >V!!# ӰjX<$X~ =$X8 O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**PӰjX E'b& >V!!# ӰjX<$X~ =$X8 P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**QӰjX E'b& >V!!# ӰjX<$X~ =$X8 Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** RӰjX E'b& >V!!# ӰjX<$X~ =$X8 R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **SӰjX E'b& >V!!# ӰjX<$X~ =$X8 S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**TӰjX E'b& >V!!# ӰjX<$X~ =$X8 T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**UӰjX E'b& >V!!# ӰjX<$X~ =$X8 U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0VӰjX E'b& >V!!# ӰjX<$X~ =$X8 V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**WӰjX E'b& >V!!# ӰjX<$X~ =$X8 W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**XӰjX E'b& >V!!# ӰjX<$X~ =$X8 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**YӰjX E'b& >V!!# ӰjX<$X~ =$X8 Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ZӰjX E'b& >V!!# ӰjX<$X~ =$X8 Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** [ӰjX E'b& >V!!# ӰjX<$X~ =$X8 [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **\ӰjX E'b& >V!!# ӰjX<$X~ =$X8 \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**]ӰjX E'b& >V!!# ӰjX<$X~ =$X8 ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+wowerShell\v1 E'b& >VE'b!# ӰjX<$X~ =$X8 ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk^ѳ^ѳ| _Dl=f?mMF&**^ӰjX E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ӰjX<$X~ =$X8 ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**_ӰjX E'b& >V!!# ӰjX<$X~ =$X8 _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(`ӰjX E'b& >V!!# ӰjX<$X~ =$X8 ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@aӰjX E'b& >V!!# ӰjX<$X~ =$X8 a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0bӰjX E'b& >V!!# ӰjX<$X~ =$X8 b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** cӰjX E'b& >V!!# ӰjX<$X~ =$X8 c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** dӰjX E'b& >V!!# ӰjX<$X~ =$X8 d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **eӰjX E'b& >V!!# ӰjX<$X~ =$X8 e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**fӰjX E'b& >V!!# ӰjX<$X~ =$X8 f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(gӰjX E'b& >V!!# ӰjX<$X~ =$X8 g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t8 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@hpjX E'b& >V!!# pjX<$X =$X h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**ipjX E'b& >V!!# pjX<$X =$X i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **jpjX E'b& >V!!# pjX<$X =$X j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **kpjX E'b& >V!!# pjX<$X =$X k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** lpjX E'b& >V!!# pjX<$X =$X l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **mpjX E'b& >V!!# pjX<$X =$X m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**npjX E'b& >V!!# pjX<$X =$X n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**opjX E'b& >V!!# pjX<$X =$X o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0ppjX E'b& >V!!# pjX<$X =$X p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**qpjX E'b& >V!!# pjX<$X =$X q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**rpjX E'b& >V!!# pjX<$X =$X r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**spjX E'b& >V!!# pjX<$X =$X s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**tpjX E'b& >V!!# pjX<$X =$X t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** upjX E'b& >V!!# pjX<$X =$X u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **vpjX E'b& >V!!# pjX<$X =$X v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**wpjX E'b& >V!!# pjX<$X =$X w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**xpjX E'b& >V!!# pjX<$X =$X x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ypjX E'b& >V!!# pjX<$X =$X y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(zpjX E'b& >V!!# pjX<$X =$X z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@{pjX E'b& >V!!# pjX<$X =$X { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0|pjX E'b& >V!!# pjX<$X =$X | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** }pjX E'b& >V!!# pjX<$X =$X } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ~pjX E'b& >V!!# pjX<$X =$X ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **pjX E'b& >V!!# pjX<$X =$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**pjX E'b& >V!!# pjX<$X =$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(pjX E'b& >V!!# pjX<$X =$X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(,=Z E'b& >V!!# ,=ZN~)Z ~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678910**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(?Z E'b& >V!!# ?ZN~)Z~)Z0  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** @Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789K0**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@Z E'b& >V!!# @ZN~)Z~)Z  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**³@Z E'b& >V!!# @ZN~)Z~)Z ³ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ó@Z E'b& >V!!# @ZN~)Z~)Z ó ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ij@Z E'b& >V!!# @ZN~)Z~)Z ij ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ų@Z E'b& >V!!# @ZN~)Z~)Z ų ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Ƴ@Z E'b& >V!!# @ZN~)Z~)Z Ƴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**dz@Z E'b& >V!!# @ZN~)Z~)Z dz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ȳ@Z E'b& >V!!# @ZN~)Z~)Z ȳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ɳ@Z E'b& >V!!# @ZN~)Z~)Z ɳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ʳ@Z E'b& >V!!# @ZN~)Z~)Z ʳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ˳@Z E'b& >V!!# @ZN~)Z~)Z ˳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ̳@Z E'b& >V!!# @ZN~)Z~)Z ̳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ͳ@Z E'b& >V!!# @ZN~)Z~)Z ͳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**γ@Z E'b& >V!!# @ZN~)Z~)Z γ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ϳ@Z E'b& >V!!# @ZN~)Z~)Z ϳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** гF4] E'b& >V!!# F4]?\q\x dг ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ѳF4] E'b& >V!!# F4]?\q\x dѳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 > E'b& >V 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkҳEҳEpYq5Dl=f?mMF5<&**ҳF4] E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# F4]?\q\x dҳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ӳF4] E'b& >V!!# F4]?\q\x dӳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ԳF4] E'b& >V!!# F4]?\q\x dԳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ճF4] E'b& >V!!# F4]?\q\x dճ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ֳF4] E'b& >V!!# F4]?\q\x dֳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**׳F4] E'b& >V!!# F4]?\q\x d׳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0سF4] E'b& >V!!# F4]?\q\x dس ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**ٳF4] E'b& >V!!# F4]?\q\x dٳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**ڳF4] E'b& >V!!# F4]?\q\x dڳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**۳F4] E'b& >V!!# F4]?\q\x d۳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ܳF4] E'b& >V!!# F4]?\q\x dܳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** ݳF4] E'b& >V!!# F4]?\q\x dݳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 i **޳F4] E'b& >V!!# F4]?\q\x d޳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**߳F4] E'b& >V!!# F4]?\q\x d߳ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&x C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(F4] E'b& >V!!# F4]?\q\x d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25<6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(و] E'b& >V!!# و]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy ** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0 aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@aω] E'b& >V!!# aω]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Gщ] E'b& >V!!# Gщ]?\q\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** B}_ E'b& >V!!# B}_>(7_v(7_|  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **B}_ E'b& >V!!# B}_>(7_v(7_|  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** B}_ E'b& >V!!# B}_>(7_v(7_|  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**!B}_ E'b& >V!!# B}_>(7_v(7_| ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "B}_ E'b& >V!!# B}_>(7_v(7_| " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **#B}_ E'b& >V!!# B}_>(7_v(7_| # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**$B}_ E'b& >V!!# B}_>(7_v(7_| $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**%B}_ E'b& >V!!# B}_>(7_v(7_| % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0&B}_ E'b& >V!!# B}_>(7_v(7_| & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**'B}_ E'b& >V!!# B}_>(7_v(7_| ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**(B}_ E'b& >V!!# B}_>(7_v(7_| ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**)B}_ E'b& >V!!# B}_>(7_v(7_| ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h***B}_ E'b& >V!!# B}_>(7_v(7_| * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** +B}_ E'b& >V!!# B}_>(7_v(7_| + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **,B}_ E'b& >V!!# B}_>(7_v(7_| , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**-B}_ E'b& >V!!# B}_>(7_v(7_| - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**.B}_ E'b& >V!!# B}_>(7_v(7_| . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**/B}_ E'b& >V!!# B}_>(7_v(7_| / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(0B}_ E'b& >V!!# B}_>(7_v(7_| 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@1B}_ E'b& >V!!# B}_>(7_v(7_| 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**02B}_ E'b& >V!!# B}_>(7_v(7_| 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** 3B}_ E'b& >V!!# B}_>(7_v(7_| 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 4B}_ E'b& >V!!# B}_>(7_v(7_| 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **5B}_ E'b& >V!!# B}_>(7_v(7_| 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6B}_ E'b& >V!!# B}_>(7_v(7_| 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(7B}_ E'b& >V!!# B}_>(7_v(7_| 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 8PE}_ E'b& >V!!# PE}_>(7_w(7_ H8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9PE}_ E'b& >V!!# PE}_>(7_w(7_ H9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:PE}_ E'b& >V!!# PE}_>(7_w(7_ H: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;PE}_ E'b& >V!!# PE}_>(7_w(7_ H; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** <PE}_ E'b& >V!!# PE}_>(7_w(7_ H< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **=PE}_ E'b& >V!!# PE}_>(7_w(7_ H= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**>PE}_ E'b& >V!!# PE}_>(7_w(7_ H> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**?PE}_ E'b& >V!!# PE}_>(7_w(7_ H? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0@PE}_ E'b& >V!!# PE}_>(7_w(7_ H@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**APE}_ E'b& >V!!# PE}_>(7_w(7_ HA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**BPE}_ E'b& >V!!# PE}_>(7_w(7_ HB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**CPE}_ E'b& >V!!# PE}_>(7_w(7_ HC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**DPE}_ E'b& >V!!# PE}_>(7_w(7_ HD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** EPE}_ E'b& >V!!# PE}_>(7_w(7_ HE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow owerShell\v1 E'b& >VE'b!# PE}_>(7_w(7_ HF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkFF4!5iDl=f?mMF"&**FPE}_ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# PE}_>(7_w(7_ HF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**GPE}_ E'b& >V!!# PE}_>(7_w(7_ HG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**HPE}_ E'b& >V!!# PE}_>(7_w(7_ HH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**IPE}_ E'b& >V!!# PE}_>(7_w(7_ HI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(JPE}_ E'b& >V!!# PE}_>(7_w(7_ HJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@KPE}_ E'b& >V!!# PE}_>(7_w(7_ HK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0LPE}_ E'b& >V!!# PE}_>(7_w(7_ HL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** MPE}_ E'b& >V!!# PE}_>(7_w(7_ HM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** NPE}_ E'b& >V!!# PE}_>(7_w(7_ HN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **OPE}_ E'b& >V!!# PE}_>(7_w(7_ HO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**PPE}_ E'b& >V!!# PE}_>(7_w(7_ HP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(QPE}_ E'b& >V!!# PE}_>(7_w(7_ HQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@RiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2"6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**SiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **TiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **UiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** ViYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **WiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**XiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**YiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0ZiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**[iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**\iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**]iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**^iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **`iYF}_ E'b& >V!!# iYF}_>(7_4w(7_ l` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**aiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ la ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**biYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ciYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(diYF}_ E'b& >V!!# iYF}_>(7_4w(7_ ld ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@eiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ le ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0fiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lf ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** giYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** hiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **iiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ li ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**jiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(kiYF}_ E'b& >V!!# iYF}_>(7_4w(7_ lk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** la E'b& >V!!# aaCa l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ma E'b& >V!!# aaCa m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**na E'b& >V!!# aaCa n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**oa E'b& >V!!# aaCa o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** pa E'b& >V!!# aaCa p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **qa E'b& >V!!# aaCa q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ra E'b& >V!!# aaCa r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**sa E'b& >V!!# aaCa s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0ta E'b& >V!!# aaCa t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**ua E'b& >V!!# aaCa u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**va E'b& >V!!# aaCa v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**wa E'b& >V!!# aaCa w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**xa E'b& >V!!# aaCa x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ya E'b& >V!!# aaCa y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **za E'b& >V!!# aaCa z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**{a E'b& >V!!# aaCa { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**|a E'b& >V!!# aaCa | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**}a E'b& >V!!# aaCa } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(~a E'b& >V!!# aaCa ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(a E'b& >V!!# aaCa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(na E'b& >V!!# naaa| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t|C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**06a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678950**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**06a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(6a E'b& >V!!# 6aaa  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk--pK'|Dl=f?mMF& **|+d E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿W0$DD EventDataA=loData= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe**(|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . .Ŀ[9TDA)l= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2r(**|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r** |+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0?w **|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0I**|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**|+d E'b& >V!!# |+d,'c^'c ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $c**0´|+d E'b& >V!!# |+d,'c^'c (´ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ft-W0**ô|+d E'b& >V!!# |+d,'c^'c (ô ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-W**Ĵ|+d E'b& >V!!# |+d,'c^'c (Ĵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2W**Ŵ|+d E'b& >V!!# |+d,'c^'c (Ŵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .c**ƴ|+d E'b& >V!!# |+d,'c^'c (ƴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,W** Ǵ|+d E'b& >V!!# |+d,'c^'c (Ǵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **ȴ|+d E'b& >V!!# |+d,'c^'c (ȴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**ɴ|+d E'b& >V!!# |+d,'c^'c (ɴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**ʴ|+d E'b& >V!!# |+d,'c^'c (ʴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**˴|+d E'b& >V!!# |+d,'c^'c (˴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(̴|+d E'b& >V!!# |+d,'c^'c (̴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ʹ|+d E'b& >V!!# |+d,'c^'c (ʹ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0δ|+d E'b& >V!!# |+d,'c^'c (δ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** ϴ|+d E'b& >V!!# |+d,'c^'c (ϴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** д|+d E'b& >V!!# |+d,'c^'c (д ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **Ѵ|+d E'b& >V!!# |+d,'c^'c (Ѵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Ҵ|+d E'b& >V!!# |+d,'c^'c (Ҵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Ӵ|+d E'b& >V!!# |+d,'c^'c (Ӵ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Դk+d E'b& >V!!# k+d,'c^'c$Դ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **մk+d E'b& >V!!# k+d,'c^'c$մ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ִk+d E'b& >V!!# k+d,'c^'c$ִ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**״k+d E'b& >V!!# k+d,'c^'c$״ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** شk+d E'b& >V!!# k+d,'c^'c$ش ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **ٴk+d E'b& >V!!# k+d,'c^'c$ٴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ڴk+d E'b& >V!!# k+d,'c^'c$ڴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**۴k+d E'b& >V!!# k+d,'c^'c$۴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0ܴk+d E'b& >V!!# k+d,'c^'c$ܴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**ݴk+d E'b& >V!!# k+d,'c^'c$ݴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**޴k+d E'b& >V!!# k+d,'c^'c$޴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ߴk+d E'b& >V!!# k+d,'c^'c$ߴ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(k+d E'b& >V!!# k+d,'c^'c$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**06H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** 6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**06H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** 6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(6H^+d E'b& >V!!# 6H^+d,'c_'c\ $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy ** mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**mÏf E'b& >V!!# mÏf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** .Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&DC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** .Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** .Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **.Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** .Ïf E'b& >V!!# .Ïf2pIfIfD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(!.Ïf E'b& >V!!# .Ïf2pIfIfD ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tDC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** "p2,Əf E'b& >V!!# p2,Əf2pIfIf4  " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **#p2,Əf E'b& >V!!# p2,Əf2pIfIf4  # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$p2,Əf E'b& >V!!# p2,Əf2pIfIf4  $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%p2,Əf E'b& >V!!# p2,Əf2pIfIf4  % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &p2,Əf E'b& >V!!# p2,Əf2pIfIf4  & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **'p2,Əf E'b& >V!!# p2,Əf2pIfIf4  ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(p2,Əf E'b& >V!!# p2,Əf2pIfIf4  ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**)p2,Əf E'b& >V!!# p2,Əf2pIfIf4  ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0*p2,Əf E'b& >V!!# p2,Əf2pIfIf4  * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**+p2,Əf E'b& >V!!# p2,Əf2pIfIf4  + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**,p2,Əf E'b& >V!!# p2,Əf2pIfIf4  , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**-p2,Əf E'b& >V!!# p2,Əf2pIfIf4  - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t4 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .hl\v1.0\power E'b& >VE'b!# p2,Əf2pIfIf4  . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .