ElfFile>jElfChnk..EDl=f?mMF%'&**.ʣ] E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# ʣ]97`97`. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l.** /ʣ] E'b& >V!!# ʣ]97`97`/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l **0ʣ] E'b& >V!!# ʣ]97`97`0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1i**1ʣ] E'b& >V!!# ʣ]97`97`1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+i**2ʣ] E'b& >V!!# ʣ]97`97`2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**3ʣ] E'b& >V!!# ʣ]97`97`3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(4ʣ] E'b& >V!!# ʣ]97`97`4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyal(**@5ʣ] E'b& >V!!# ʣ]97`97`5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyt-Wi@**06ʣ] E'b& >V!!# ʣ]97`97`6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tttern0** 7ʣ] E'b& >V!!# ʣ]97`97`7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMndow ** 8ʣ] E'b& >V!!# ʣ]97`97`8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMs-In **9ʣ] E'b& >V!!# ʣ]97`97`9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6n**:ʣ] E'b& >V!!# ʣ]97`97`: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0n**(;ʣ] E'b& >V!!# ʣ]97`97`; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyo(**@<Fa E'b& >V!!# Fa8׵7a׵ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%'6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**=Fa E'b& >V!!# Fa8׵7a׵ = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**>Fa E'b& >V!!# Fa8׵7a׵ > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**?Fa E'b& >V!!# Fa8׵7a׵ ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @Fa E'b& >V!!# Fa8׵7a׵ @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **AFa E'b& >V!!# Fa8׵7a׵ A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**BFa E'b& >V!!# Fa8׵7a׵ B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**CFa E'b& >V!!# Fa8׵7a׵ C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0DFa E'b& >V!!# Fa8׵7a׵ D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789Dz0**EFa E'b& >V!!# Fa8׵7a׵ E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-z**FFa E'b& >V!!# Fa8׵7a׵ F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2z**GFa E'b& >V!!# Fa8׵7a׵ G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**HFa E'b& >V!!# Fa8׵7a׵ H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** IFa E'b& >V!!# Fa8׵7a׵ I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **JFa E'b& >V!!# Fa8׵7a׵ J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**KFa E'b& >V!!# Fa8׵7a׵ K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**LFa E'b& >V!!# Fa8׵7a׵ L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**MFa E'b& >V!!# Fa8׵7a׵ M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(NFa E'b& >V!!# Fa8׵7a׵ N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@OFa E'b& >V!!# Fa8׵7a׵ O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0PFa E'b& >V!!# Fa8׵7a׵ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** QFa E'b& >V!!# Fa8׵7a׵ Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** RFa E'b& >V!!# Fa8׵7a׵ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **SFa E'b& >V!!# Fa8׵7a׵ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**TFa E'b& >V!!# Fa8׵7a׵ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(UFa E'b& >V!!# Fa8׵7a׵ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** V@c E'b& >V!!# @c8׵;׵V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **W@c E'b& >V!!# @c8׵;׵W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**X@c E'b& >V!!# @c8׵;׵X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Y@c E'b& >V!!# @c8׵;׵Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Z@c E'b& >V!!# @c8׵;׵Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **[@c E'b& >V!!# @c8׵;׵[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**\@c E'b& >V!!# @c8׵;׵\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**]@c E'b& >V!!# @c8׵;׵] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0^@c E'b& >V!!# @c8׵;׵^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789i{0**_@c E'b& >V!!# @c8׵;׵_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-{**`@c E'b& >V!!# @c8׵;׵` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2{**a@c E'b& >V!!# @c8׵;׵a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**b@c E'b& >V!!# @c8׵;׵b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** c@c E'b& >V!!# @c8׵;׵c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **d@c E'b& >V!!# @c8׵;׵d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**e@c E'b& >V!!# @c8׵;׵e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**f@c E'b& >V!!# @c8׵;׵f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**g@c E'b& >V!!# @c8׵;׵g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(h@c E'b& >V!!# @c8׵;׵h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@i@c E'b& >V!!# @c8׵;׵i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0j@c E'b& >V!!# @c8׵;׵j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** k@c E'b& >V!!# @c8׵;׵k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** l@c E'b& >V!!# @c8׵;׵l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **m@c E'b& >V!!# @c8׵;׵m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**n@c E'b& >V!!# @c8׵;׵n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(o@c E'b& >V!!# @c8׵;׵o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** pd E'b& >V!!# d8׵a׵| Pp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **qd E'b& >V!!# d8׵a׵| Pq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**rd E'b& >V!!# d8׵a׵| Pr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**sd E'b& >V!!# d8׵a׵| Ps ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** td E'b& >V!!# d8׵a׵| Pt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ud E'b& >V!!# d8׵a׵| Pu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**vd E'b& >V!!# d8׵a׵| Pv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**wd E'b& >V!!# d8׵a׵| Pw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0xd E'b& >V!!# d8׵a׵| Px ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789HrY0**yd E'b& >V!!# d8׵a׵| Py ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-Y**zd E'b& >V!!# d8׵a׵| Pz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2Y**{d E'b& >V!!# d8׵a׵| P{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**|d E'b& >V!!# d8׵a׵| P| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** }d E'b& >V!!# d8׵a׵| P} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **~d E'b& >V!!# d8׵a׵| P~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** )T E'b& >V!!# )TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **)T E'b& >V!!# )TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**02C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789!\0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-\**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2\**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**02C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk@yh{1KkSDl=f?mMF &**2C,T E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0l.**(2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**T E'b& >V!!# TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** $T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**($T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** $T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** $T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2z **$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**$T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**($T E'b& >V!!# $TD5O58 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** -U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** -U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** -U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** -U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** -U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2{ **-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(-U E'b& >V!!# -UD5^5 p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(d@c E'b& >V!!# @c8׵;׵d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**e@c E'b& >V!!# @c8׵;׵e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**f@c E'b& >V!!# @c8׵;׵f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**g@c E'b& >V!!# @c8׵;׵g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(h@c E'b& >V!!# @c8׵;׵h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@i@c E'b& >V!!# @c8׵;׵i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0j@c E'b& >V!!# @c8׵;׵j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** k@c E'b& >V!!# @c8׵;׵k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** l@c E'b& >V!!# @c8׵;׵l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **m@c E'b& >V!!# @c8׵;׵m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**n@c E'b& >V!!# @c8׵;׵n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(o@c E'b& >V!!# @c8׵;׵o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** pd E'b& >V!!# d8׵a׵| Pp ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **qd E'b& >V!!# d8׵a׵| Pq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**rd E'b& >V!!# d8׵a׵| Pr ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**sd E'b& >V!!# d8׵a׵| Ps ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** td E'b& >V!!# d8׵a׵| Pt ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ud E'b& >V!!# d8׵a׵| Pu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**vd E'b& >V!!# d8׵a׵| Pv ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**wd E'b& >V!!# d8׵a׵| Pw ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0xd E'b& >V!!# d8׵a׵| Px ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789HrY0**yd E'b& >V!!# d8׵a׵| Py ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-Y**zd E'b& >V!!# d8׵a׵| Pz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2Y**{d E'b& >V!!# d8׵a׵| P{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**|d E'b& >V!!# d8׵a׵| P| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** }d E'b& >V!!# d8׵a׵| P} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **~d E'b& >V!!# d8׵a׵| P~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(d E'b& >V!!# d8׵a׵| P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t| C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** )T E'b& >V!!# )TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **)T E'b& >V!!# )TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**02C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789!\0**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-\**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2\**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**02C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **2C,T E'b& >V!!# 2C,TD5;5< < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkIIpfGDl=f?mMF& ** Yp E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿W0$DD EventDataA=loData= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe**( Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . .Ŀ[9TDA)l= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2r(** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r**  Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0?w ** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0I** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $c**0 Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ft-W0** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-W** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2W** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .c** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,W**  Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow ** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**( Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0 Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0**  Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. **  Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe ** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( Yp E'b& >V!!#  Yp%E:pE:  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**up E'b& >V!!# up%E:E: P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( up E'b& >V!!# up%E:E: P  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  @p E'b& >V!!# @p%E:[pE:H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** @p E'b& >V!!# @p%E:[pE:H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** @p E'b& >V!!# @p%E:[pE:H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** @p E'b& >V!!# @p%E:[pE:H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** @p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** @p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0@p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** @p E'b& >V!!# @p%E:[pE:H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. **  @p E'b& >V!!# @p%E:[pE:H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **!@p E'b& >V!!# @p%E:[pE:H! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**"@p E'b& >V!!# @p%E:[pE:H" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(#@p E'b& >V!!# @p%E:[pE:H# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** $(˜ E'b& >V!!# (˜ƕƕP $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **%(˜ E'b& >V!!# (˜ƕƕP % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**&(˜ E'b& >V!!# (˜ƕƕP & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**'(˜ E'b& >V!!# (˜ƕƕP ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ((˜ E'b& >V!!# (˜ƕƕP ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **)(˜ E'b& >V!!# (˜ƕƕP ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0***(˜ E'b& >V!!# (˜ƕƕP * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**+(˜ E'b& >V!!# (˜ƕƕP + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0,(˜ E'b& >V!!# (˜ƕƕP , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**-(˜ E'b& >V!!# (˜ƕƕP - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**.(˜ E'b& >V!!# (˜ƕƕP . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**/(˜ E'b& >V!!# (˜ƕƕP / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**0(˜ E'b& >V!!# (˜ƕƕP 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** 1(˜ E'b& >V!!# (˜ƕƕP 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **2(˜ E'b& >V!!# (˜ƕƕP 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**3(˜ E'b& >V!!# (˜ƕƕP 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**4(˜ E'b& >V!!# (˜ƕƕP 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**5(˜ E'b& >V!!# (˜ƕƕP 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(6(˜ E'b& >V!!# (˜ƕƕP 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@7(˜ E'b& >V!!# (˜ƕƕP 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&PC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**08(˜ E'b& >V!!# (˜ƕƕP 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** 9(˜ E'b& >V!!# (˜ƕƕP 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** :(˜ E'b& >V!!# (˜ƕƕP : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **;(˜ E'b& >V!!# (˜ƕƕP ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**<(˜ E'b& >V!!# (˜ƕƕP < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(=(˜ E'b& >V!!# (˜ƕƕP = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tPC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** >C E'b& >V!!# CƕĐƕx\> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USxC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **?C E'b& >V!!# CƕĐƕx\? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**@C E'b& >V!!# CƕĐƕx\@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**AC E'b& >V!!# CƕĐƕx\A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** BC E'b& >V!!# CƕĐƕx\B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **CC E'b& >V!!# CƕĐƕx\C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**DC E'b& >V!!# CƕĐƕx\D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**EC E'b& >V!!# CƕĐƕx\E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0FC E'b& >V!!# CƕĐƕx\F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**GC E'b& >V!!# CƕĐƕx\G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**HC E'b& >V!!# CƕĐƕx\H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**IC E'b& >V!!# CƕĐƕx\I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .hl\v1.0\power E'b& >VE'b!# CƕĐƕx\J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkJJ<< ,ODl=f?mMF%'&**JC E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# CƕĐƕx\J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l.** KC E'b& >V!!# CƕĐƕx\K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l **LC E'b& >V!!# CƕĐƕx\L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1i**MC E'b& >V!!# CƕĐƕx\M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+i**NC E'b& >V!!# CƕĐƕx\N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /i**OC E'b& >V!!# CƕĐƕx\O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :r**(PC E'b& >V!!# CƕĐƕx\P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyal(**@QC E'b& >V!!# CƕĐƕx\Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&xC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyt-Wi@**0RC E'b& >V!!# CƕĐƕx\R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tttern0** SC E'b& >V!!# CƕĐƕx\S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMndow ** TC E'b& >V!!# CƕĐƕx\T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMs-In **UC E'b& >V!!# CƕĐƕx\U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6n**VC E'b& >V!!# CƕĐƕx\V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0n**(WC E'b& >V!!# CƕĐƕx\W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyo(**@X E'b& >V!!# ƕϐƕ4X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%'6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**Y E'b& >V!!# ƕϐƕ4Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Z E'b& >V!!# ƕϐƕ4Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**[ E'b& >V!!# ƕϐƕ4[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** \ E'b& >V!!# ƕϐƕ4\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **] E'b& >V!!# ƕϐƕ4] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**^ E'b& >V!!# ƕϐƕ4^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**_ E'b& >V!!# ƕϐƕ4_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0` E'b& >V!!# ƕϐƕ4` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789 Y0**a E'b& >V!!# ƕϐƕ4a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**b E'b& >V!!# ƕϐƕ4b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**c E'b& >V!!# ƕϐƕ4c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**d E'b& >V!!# ƕϐƕ4d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** e E'b& >V!!# ƕϐƕ4e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **f E'b& >V!!# ƕϐƕ4f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**g E'b& >V!!# ƕϐƕ4g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**h E'b& >V!!# ƕϐƕ4h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**i E'b& >V!!# ƕϐƕ4i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(j E'b& >V!!# ƕϐƕ4j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@kC E'b& >V!!# Cƕϐƕ4k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0lC E'b& >V!!# Cƕϐƕ4l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** mC E'b& >V!!# Cƕϐƕ4m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** nC E'b& >V!!# Cƕϐƕ4n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **oC E'b& >V!!# Cƕϐƕ4o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**pC E'b& >V!!# Cƕϐƕ4p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(qC E'b& >V!!# Cƕϐƕ4q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t4C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** r0G}7 E'b& >V!!# 0G}7xvzE{E t r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **s0G}7 E'b& >V!!# 0G}7xvzE{E t s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**t0G}7 E'b& >V!!# 0G}7xvzE{E t t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**u0G}7 E'b& >V!!# 0G}7xvzE{E t u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** v0G}7 E'b& >V!!# 0G}7xvzE{E t v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **w0G}7 E'b& >V!!# 0G}7xvzE{E t w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**x0G}7 E'b& >V!!# 0G}7xvzE{E t x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**y0G}7 E'b& >V!!# 0G}7xvzE{E t y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0z0G}7 E'b& >V!!# 0G}7xvzE{E t z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789u0**{0G}7 E'b& >V!!# 0G}7xvzE{E t { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**|0G}7 E'b& >V!!# 0G}7xvzE{E t | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**}0G}7 E'b& >V!!# 0G}7xvzE{E t } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**~0G}7 E'b& >V!!# 0G}7xvzE{E t ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**00G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** 0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(0G}7 E'b& >V!!# 0G}7xvzE{E t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USd C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789@0** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&d C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **  €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( €7 E'b& >V!!#  €7xvzE7{Ed 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2%' ten-USdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789(˜0**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /y**P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&dC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk11eZs.VDl=f?mMF &**P7 E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0l.**(P7 E'b& >V!!# P7xvzE;{Ed ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tdC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** |u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** |u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** |u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** |u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(|u E'b& >V!!# |ujMLNL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** + E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** + E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** + E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&p C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** + E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** + E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(+ E'b& >V!!# +jML3NLp X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&HC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670**  a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q **  a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 ** a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( a E'b& >V!!# ajMLNLHD  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-US<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **p E'b& >V!!# pj\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0 E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w**  E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh ** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h** E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(  E'b& >V!!# j\CL\C<  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@! E'b& >V!!# j\CL\C< ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0" E'b& >V!!# j\CL\C< " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** # E'b& >V!!# j\CL\C< # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** $ E'b& >V!!# j\CL\C< $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **% E'b& >V!!# j\CL\C< % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**& E'b& >V!!# j\CL\C< & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(' E'b& >V!!# j\CL\C< ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t<C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** (* E'b& >V!!# *j\CZ\Cx( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2  ten-USxC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **)Q E'b& >V!!# Qj\CZ\Cx) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2***Q E'b& >V!!# Qj\CZ\Cx* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**+Q E'b& >V!!# Qj\CZ\Cx+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ,Q E'b& >V!!# Qj\CZ\Cx, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **-Q E'b& >V!!# Qj\CZ\Cx- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**.Q E'b& >V!!# Qj\CZ\Cx. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**/Q E'b& >V!!# Qj\CZ\Cx/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**00Q E'b& >V!!# Qj\CZ\Cx0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**1Q E'b& >V!!# Qj\CZ\Cx1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0owershell.ex E'b& >V >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnk22~ŤoDl=f?mMFU+&**2Q E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# Qj\CZ\Cx2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2l.**3Q E'b& >V!!# Qj\CZ\Cx3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**4Q E'b& >V!!# Qj\CZ\Cx4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 5Q E'b& >V!!# Qj\CZ\Cx5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ndo **6Q E'b& >V!!# Qj\CZ\Cx6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1o**7Q E'b& >V!!# Qj\CZ\Cx7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+o**8Q E'b& >V!!# Qj\CZ\Cx8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /o**9Q E'b& >V!!# Qj\CZ\Cx9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :W**(:Q E'b& >V!!# Qj\CZ\Cx: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy-I(**@;Q E'b& >V!!# Qj\CZ\Cx; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&xC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy.?w@**0<Q E'b& >V!!# Qj\CZ\Cx< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttt-Wi0** =Q E'b& >V!!# Qj\CZ\Cx= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMMicr ** >Q E'b& >V!!# Qj\CZ\Cx> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMosof **?Q E'b& >V!!# Qj\CZ\Cx? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6f**@Q E'b& >V!!# Qj\CZ\Cx@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0f**(AQ E'b& >V!!# Qj\CZ\CxA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyw(**@B(  E'b& >V!!# ( j\Ch\CHXB ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**C,  E'b& >V!!# , j\Ch\CHXC ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**D,  E'b& >V!!# , j\Ch\CHXD ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**E,  E'b& >V!!# , j\Ch\CHXE ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** F,  E'b& >V!!# , j\Ch\CHXF ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **G,  E'b& >V!!# , j\Ch\CHXG ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**H,  E'b& >V!!# , j\Ch\CHXH ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**I,  E'b& >V!!# , j\Ch\CHXI ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0J,  E'b& >V!!# , j\Ch\CHXJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**K,  E'b& >V!!# , j\Ch\CHXK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**L,  E'b& >V!!# , j\Ch\CHXL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**M,  E'b& >V!!# , j\Ch\CHXM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**N,  E'b& >V!!# , j\Ch\CHXN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** O,  E'b& >V!!# , j\Ch\CHXO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **P,  E'b& >V!!# , j\Ch\CHXP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Q,  E'b& >V!!# , j\Ch\CHXQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**R,  E'b& >V!!# , j\Ch\CHXR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**S,  E'b& >V!!# , j\Ch\CHXS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(T,  E'b& >V!!# , j\Ch\CHXT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@U,  E'b& >V!!# , j\Ch\CHXU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&HC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0V,  E'b& >V!!# , j\Ch\CHXV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** W,  E'b& >V!!# , j\Ch\CHXW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** X,  E'b& >V!!# , j\Ch\CHXX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Y,  E'b& >V!!# , j\Ch\CHXY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Z,  E'b& >V!!# , j\Ch\CHXZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**([,  E'b& >V!!# , j\Ch\CHX[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tHC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** \AI E'b& >V!!# AI\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **]AI E'b& >V!!# AI] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**^AI E'b& >V!!# AI^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**_AI E'b& >V!!# AI_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** `AI E'b& >V!!# AI` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **aAI E'b& >V!!# AIa ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**bAI E'b& >V!!# AIb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**cAI E'b& >V!!# AIc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0dAI E'b& >V!!# AId ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**eAI E'b& >V!!# AIe ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**fAI E'b& >V!!# AIf ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**gAI E'b& >V!!# AIg ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**hAI E'b& >V!!# AIh ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** iAI E'b& >V!!# AIi ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **jAI E'b& >V!!# AIj ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**kAI E'b& >V!!# AIk ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**lAI E'b& >V!!# AIl ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**mAI E'b& >V!!# AIm ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(nX@I E'b& >V!!# X@In ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@oX@I E'b& >V!!# X@Io ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0pX@I E'b& >V!!# X@Ip ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** qX@I E'b& >V!!# X@Iq ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** rX@I E'b& >V!!# X@Ir ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **sX@I E'b& >V!!# X@Is ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**tX@I E'b& >V!!# X@It ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(uX@I E'b& >V!!# X@Iu ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** vĝI E'b& >V!!# ĝI,J $ v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2U+ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **wĝI E'b& >V!!# ĝI,J $ w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**xĝI E'b& >V!!# ĝI,J $ x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**yĝI E'b& >V!!# ĝI,J $ y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** zĝI E'b& >V!!# ĝI,J $ z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **{ĝI E'b& >V!!# ĝI,J $ { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**|ĝI E'b& >V!!# ĝI,J $ | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**}ĝI E'b& >V!!# ĝI,J $ } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0~ĝI E'b& >V!!# ĝI,J $ ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678920**ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .M**ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0xe **ĝI E'b& >V!!# ĝI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :.**(ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b& ** ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ēI E'b& >V!!# ēI,J $  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0cEI E'b& >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** cEI E'b& >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AME'b&  E'b& >VV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . ElfChnkp!Dl=f?mMF&**cEI E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM.**cEI E'b& >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**cEI E'b& >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(cEI E'b& >V!!# cEI9J  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exet-Wi@**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .i**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,i** s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0sof **s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $W**0s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ws-I0**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-I**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2I**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .W**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(s E'b& >V!!# sZA_A(A_\  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** _ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** _ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** _ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** _ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(_ E'b& >V!!# _ZA_K(A_ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** } E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** } E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** } E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**(} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670** } E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** } E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(} E'b& >V!!# }ZA_W(A_  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\**0. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789\pow0**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-0**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 20**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .0**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0rSh **. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1h**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+h**. E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /h** . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :w**( . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyl\(**@ . E'b& >V!!# .E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyexe@**0 21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt45670**  21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM Q ** 21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM2 **21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6M**21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0h**(21 E'b& >V!!# 21E$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0M**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0h**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $\.0\powershel E'b& >V!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkxpq"Dl=f?mMF/&**7 E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,o** 7 E'b& >V!!# 7E/ P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ter ** 7 E'b& >V!!# 7E/ P  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1r**!7 E'b& >V!!# 7E/ P! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+r**"7 E'b& >V!!# 7E/ P" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /r**#7 E'b& >V!!# 7E/ P# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :I**($7 E'b& >V!!# 7E/ P$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyti(**@%7 E'b& >V!!# 7E/ P% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyosof@**0&7 E'b& >V!!# 7E/ P& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tts-In0** '7 E'b& >V!!# 7E/ P' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMt-Wi ** (7 E'b& >V!!# 7E/ P( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMndow **)7 E'b& >V!!# 7E/ P) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6w***7 E'b& >V!!# 7E/ P* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0w**(+7 E'b& >V!!# 7E/ P+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyn(**@,P E'b& >V!!# PE> , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**-P E'b& >V!!# PE> - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**.P E'b& >V!!# PE> . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**/P E'b& >V!!# PE> / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 0P E'b& >V!!# PE> 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **1P E'b& >V!!# PE> 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**2P E'b& >V!!# PE> 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**3P E'b& >V!!# PE> 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**04P E'b& >V!!# PE> 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**5P E'b& >V!!# PE> 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**6P E'b& >V!!# PE> 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**7P E'b& >V!!# PE> 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**8P E'b& >V!!# PE> 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 9P E'b& >V!!# PE> 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **:P E'b& >V!!# PE> : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**;P E'b& >V!!# PE> ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**<P E'b& >V!!# PE> < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**=P E'b& >V!!# PE> = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(>P E'b& >V!!# PE> > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@?P E'b& >V!!# PE> ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0@P E'b& >V!!# PE> @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** AP E'b& >V!!# PE> A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** BP E'b& >V!!# PE> B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **CP E'b& >V!!# PE> C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**DP E'b& >V!!# PE> D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(EP E'b& >V!!# PE> E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** F9h\ E'b& >V!!# 9h\A A F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Gjh\ E'b& >V!!# jh\A A G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Hjh\ E'b& >V!!# jh\A A H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Ijh\ E'b& >V!!# jh\A A I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Jjh\ E'b& >V!!# jh\A A J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Kjh\ E'b& >V!!# jh\A A K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Ljh\ E'b& >V!!# jh\A A L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Mjh\ E'b& >V!!# jh\A A M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Nh\ E'b& >V!!# h\A A N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**Oh\ E'b& >V!!# h\A A O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Ph\ E'b& >V!!# h\A A P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Qh\ E'b& >V!!# h\A A Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Rh\ E'b& >V!!# h\A A R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Sh\ E'b& >V!!# h\A A S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **Th\ E'b& >V!!# h\A A T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Uh\ E'b& >V!!# h\A A U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Vh\ E'b& >V!!# h\A A V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Wh\ E'b& >V!!# h\A A W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Xh\ E'b& >V!!# h\A A X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@Y@h\ E'b& >V!!# @h\A A Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Z@h\ E'b& >V!!# @h\A A Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** [@h\ E'b& >V!!# @h\A A [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** \@h\ E'b& >V!!# @h\A A \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **]@h\ E'b& >V!!# @h\A A ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**^@h\ E'b& >V!!# @h\A A ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(_@h\ E'b& >V!!# @h\A A _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ` k\ E'b& >V!!#  k\A Ax ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **a k\ E'b& >V!!#  k\A Ax a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**b k\ E'b& >V!!#  k\A Ax b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**c k\ E'b& >V!!#  k\A Ax c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** d k\ E'b& >V!!#  k\A Ax d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **e k\ E'b& >V!!#  k\A Ax e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**f k\ E'b& >V!!#  k\A Ax f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**g k\ E'b& >V!!#  k\A Ax g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0h k\ E'b& >V!!#  k\A Ax h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**i k\ E'b& >V!!#  k\A Ax i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**j k\ E'b& >V!!#  k\A Ax j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**k k\ E'b& >V!!#  k\A Ax k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**l k\ E'b& >V!!#  k\A Ax l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** m k\ E'b& >V!!#  k\A Ax m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **n k\ E'b& >V!!#  k\A Ax n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**o k\ E'b& >V!!#  k\A Ax o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**p k\ E'b& >V!!#  k\A Ax p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**q k\ E'b& >V!!#  k\A Ax q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(r k\ E'b& >V!!#  k\A Ax r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@s k\ E'b& >V!!#  k\A Ax s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&x C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0t k\ E'b& >V!!#  k\A Ax t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** u k\ E'b& >V!!#  k\A Ax u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** v k\ E'b& >V!!#  k\A Ax v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **w k\ E'b& >V!!#  k\A Ax w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**x k\ E'b& >V!!#  k\A Ax x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(y k\ E'b& >V!!#  k\A Ax y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tx C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** zl\ E'b& >V!!# l\A_υAz ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2/ ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **{l\ E'b& >V!!# l\A_υA{ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**|l\ E'b& >V!!# l\A_υA| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**}l\ E'b& >V!!# l\A_υA} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ~l\ E'b& >V!!# l\A_υA~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@ E'b& >VP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk@KDl=f?mMF&**l\ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt** l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(l\ E'b& >V!!# l\A_υA ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@ E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exes-In@** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2n** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .n** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,n**  E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow ** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0r** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $I**0 E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789nati0** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .I** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,l**  E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 ** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**( E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&lC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0 E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** **  E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM7 ** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( E'b& >V!!#  $q%ql, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tlC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0P **M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMQ **M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(M). E'b& >V!!# M). $q%qX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyh(** т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0@h **т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**0т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMk **т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(т E'b& >V!!# т $q%q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyk(**  W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 k ** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** W  E'b& >V!!#  W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**04W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell.0**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,h** 4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;01.0 **4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 10**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+0**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /0**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :\**(4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&p C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy$@**04W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** 4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM** ** 4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(4W  E'b& >V!!# 4W 'š=ƚ=p  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyl(** }N  E'b& >V!!# }N 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0l **}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0y@ E'b& >V>VP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkuupÒM=">ADl=f?mMF3&**}u  E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0m:**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0t-W ** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1W** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+W** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /W** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :o**(}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyydo(**@}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&p C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy+:Wc@**0}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttosof0** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM.?w ** }u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMMicr **}u  E'b& >V!!# }u 'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6r**  E'b& >V!!#  'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0r**(  E'b& >V!!#  'š===p H  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tp C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyi(**@r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ236Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe@**r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**r2  E'b& >V!!# r2 'š=ƚ=  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** r2  E'b& >V!!# r2 'š=ƚ=   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**!r2  E'b& >V!!# r2 'š=ƚ= ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**"2  E'b& >V!!# 2 'š=ƚ= " ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** #2  E'b& >V!!# 2 'š=ƚ= # ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **$2  E'b& >V!!# 2 'š=ƚ= $ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**%2  E'b& >V!!# 2 'š=ƚ= % ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**&2  E'b& >V!!# 2 'š=ƚ= & ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**'2  E'b& >V!!# 2 'š=ƚ= ' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**((2  E'b& >V!!# 2 'š=ƚ= ( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@)2  E'b& >V!!# 2 'š=ƚ= ) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyM).@**0*2  E'b& >V!!# 2 'š=ƚ= * ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttM).0** +2  E'b& >V!!# 2 'š=ƚ= + ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ,2  E'b& >V!!# 2 'š=ƚ= , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **-2  E'b& >V!!# 2 'š=ƚ= - ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**.2  E'b& >V!!# 2 'š=ƚ= . ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(/2  E'b& >V!!# 2 'š=ƚ= / ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 0gn E'b& >V!!# gn%( (\ 0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-US\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **1gn E'b& >V!!# gn%( (\ 1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**2gn E'b& >V!!# gn%( (\ 2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**3gn E'b& >V!!# gn%( (\ 3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 4gn E'b& >V!!# gn%( (\ 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **5gn E'b& >V!!# gn%( (\ 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**6gn E'b& >V!!# gn%( (\ 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **7gn E'b& >V!!# gn%( (\ 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**084hn E'b& >V!!# 4hn%( (\ 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**94hn E'b& >V!!# 4hn%( (\ 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**:4hn E'b& >V!!# 4hn%( (\ : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**;4hn E'b& >V!!# 4hn%( (\ ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**<4hn E'b& >V!!# 4hn%( (\ < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** =4hn E'b& >V!!# 4hn%( (\ = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **>4hn E'b& >V!!# 4hn%( (\ > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**?4hn E'b& >V!!# 4hn%( (\ ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**@4hn E'b& >V!!# 4hn%( (\ @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**A4hn E'b& >V!!# 4hn%( (\ A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(B4hn E'b& >V!!# 4hn%( (\ B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@C4hn E'b& >V!!# 4hn%( (\ C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyт@**0D4hn E'b& >V!!# 4hn%( (\ D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttт0** E4hn E'b& >V!!# 4hn%( (\ E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** F4hn E'b& >V!!# 4hn%( (\ F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **G4hn E'b& >V!!# 4hn%( (\ G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**H4hn E'b& >V!!# 4hn%( (\ H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(I4hn E'b& >V!!# 4hn%( (\ I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t\ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** Jn E'b& >V!!# n%(;(xJ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-USxC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **Kn E'b& >V!!# n%(;(xK ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Ln E'b& >V!!# n%(;(xL ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Mn E'b& >V!!# n%(;(xM ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** Nn E'b& >V!!# n%(;(xN ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **On E'b& >V!!# n%(;(xO ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**Pn E'b& >V!!# n%(;(xP ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **Qn E'b& >V!!# n%(;(xQ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0Rn E'b& >V!!# n%(;(xR ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**Sn E'b& >V!!# n%(;(xS ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**Tn E'b& >V!!# n%(;(xT ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**Un E'b& >V!!# n%(;(xU ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Vn E'b& >V!!# n%(;(xV ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** Wn E'b& >V!!# n%(;(xW ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **Xn E'b& >V!!# n%(;(xX ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**Yn E'b& >V!!# n%(;(xY ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**Zn E'b& >V!!# n%(;(xZ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**[n E'b& >V!!# n%(;(x[ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :h**(\n E'b& >V!!# n%(;(x\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyye(**@]n E'b& >V!!# n%(;(x] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&xC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy4W@**0^ n E'b& >V!!#  n%(;(x^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt4W0** _ n E'b& >V!!#  n%(;(x_ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ` n E'b& >V!!#  n%(;(x` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PME'b& **a n E'b& >V!!#  n%(;(xa ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**b n E'b& >V!!#  n%(;(xb ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(c n E'b& >V!!#  n%(;(xc ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** d3Ûn E'b& >V!!# 3Ûn%( (d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ23 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **e3Ûn E'b& >V!!# 3Ûn%( (e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**f+n E'b& >V!!# +n%( (f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**g+n E'b& >V!!# +n%( (g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** h+n E'b& >V!!# +n%( (h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **i+n E'b& >V!!# +n%( (i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**j+n E'b& >V!!# +n%( (j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0 **k+n E'b& >V!!# +n%( (k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0l+n E'b& >V!!# +n%( (l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789PM0**m+n E'b& >V!!# +n%( (m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**n+n E'b& >V!!# +n%( (n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**o+n E'b& >V!!# +n%( (o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**p+n E'b& >V!!# +n%( (p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,w** q+n E'b& >V!!# +n%( (q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0ll. **r+n E'b& >V!!# +n%( (r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1.**s+n E'b& >V!!# +n%( (s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+.**t+n E'b& >V!!# +n%( (t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /.**u+n E'b& >V!!# +n%( (u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :hl.exe 0 E'b& >V!# +n%( (v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnkvve FΤDl=f?mMF&**v+n E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# +n%( (v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy**@w+n E'b& >V!!# +n%( (w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0x+n E'b& >V!!# +n%( (x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** y+n E'b& >V!!# +n%( (y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** z+n E'b& >V!!# +n%( (z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **{+n E'b& >V!!# +n%( ({ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**|+n E'b& >V!!# +n%( (| ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(}+n E'b& >V!!# +n%( (} ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@~  E'b& >V!!#  m<O<L~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.@**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**   E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0al **  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0i**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $f**0  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ndow0**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-w**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2w**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .f**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**   E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&LC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**   E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **   E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(  E'b& >V!!#  m<O<L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tLC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** %? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** %? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0%? E'b& >V!!# %?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567892 0**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q- **!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** !? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** !? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** !? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(!? E'b& >V!!# !?m<o<\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**  E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 ** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0 E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567894h0** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** ** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /** E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**( E'b& >V!!# m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@  E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0  E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**   E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **   E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **  E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**  E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(  E'b& >V!!#  m<o<(  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t(C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**1:z  E'b& >V!!# 1:z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $**0:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789 0**:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** :z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0** **:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**:z  E'b& >V!!# :z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(E;z  E'b& >V!!# E;z     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** |  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,>V E'b& >VMicrosoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .ElfChnk]]xr!QDl=f?mMF8&**|  E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** |  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** |  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** |  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(|  E'b& >V!!# |     ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ286Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**09}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** 9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h** 9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h** 9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h** 9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3**  9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@9}  E'b& >V!!# 9}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0 :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0**  :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. **  :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe ** :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( :}  E'b& >V!!#  :}      ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **X  E'b& >V!!# X *:; :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** X  E'b& >V!!# X *:; :; X  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**!X  E'b& >V!!# X *:; :; X! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0"X  E'b& >V!!# X *:; :; X" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**#X  E'b& >V!!# X *:; :; X# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**$X  E'b& >V!!# X *:; :; X$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**%X  E'b& >V!!# X *:; :; X% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**&X  E'b& >V!!# X *:; :; X& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** 'X  E'b& >V!!# X *:; :; X' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **(X  E'b& >V!!# X *:; :; X( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**)X  E'b& >V!!# X *:; :; X) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w***X  E'b& >V!!# X *:; :; X* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**+X  E'b& >V!!# X *:; :; X+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(,X  E'b& >V!!# X *:; :; X, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@-X  E'b& >V!!# X *:; :; X- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0.X  E'b& >V!!# X *:; :; X. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** /X  E'b& >V!!# X *:; :; X/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 0X  E'b& >V!!# X *:; :; X0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **1X  E'b& >V!!# X *:; :; X1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**2X  E'b& >V!!# X *:; :; X2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(3X  E'b& >V!!# X *:; :; X3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 4Z  E'b& >V!!# Z *:; :; H d 4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **5Z  E'b& >V!!# Z *:; :; H d 5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**6Z  E'b& >V!!# Z *:; :; H d 6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**7Z  E'b& >V!!# Z *:; :; H d 7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** 8Z  E'b& >V!!# Z *:; :; H d 8 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **9Z  E'b& >V!!# Z *:; :; H d 9 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:Z  E'b& >V!!# Z *:; :; H d : ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**;Z  E'b& >V!!# Z *:; :; H d ; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0<Z  E'b& >V!!# Z *:; :; H d < ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**=Z  E'b& >V!!# Z *:; :; H d = ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**>Z  E'b& >V!!# Z *:; :; H d > ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**?Z  E'b& >V!!# Z *:; :; H d ? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**@Z  E'b& >V!!# Z *:; :; H d @ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** AZ  E'b& >V!!# Z *:; :; H d A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **BZ  E'b& >V!!# Z *:; :; H d B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**CZ  E'b& >V!!# Z *:; :; H d C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**DZ  E'b& >V!!# Z *:; :; H d D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**EZ  E'b& >V!!# Z *:; :; H d E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(FZ  E'b& >V!!# Z *:; :; H d F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@GZ  E'b& >V!!# Z *:; :; H d G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&H C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0HZ  E'b& >V!!# Z *:; :; H d H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** IZ  E'b& >V!!# Z *:; :; H d I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** JZ  E'b& >V!!# Z *:; :; H d J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **KZ  E'b& >V!!# Z *:; :; H d K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**LZ  E'b& >V!!# Z *:; :; H d L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(MZ  E'b& >V!!# Z *:; :; H d M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tH C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** N[  E'b& >V!!# [ *:;  :; N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ28 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **O[  E'b& >V!!# [ *:;  :; O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**P[  E'b& >V!!# [ *:;  :; P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**Q[  E'b& >V!!# [ *:;  :; Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** R[  E'b& >V!!# [ *:;  :; R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **S[  E'b& >V!!# [ *:;  :; S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**T[  E'b& >V!!# [ *:;  :; T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**U[  E'b& >V!!# [ *:;  :; U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0V[  E'b& >V!!# [ *:;  :; V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**W[  E'b& >V!!# [ *:;  :; W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**X[  E'b& >V!!# [ *:;  :; X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**Y[  E'b& >V!!# [ *:;  :; Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**Z[  E'b& >V!!# [ *:;  :; Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** [[  E'b& >V!!# [ *:;  :; [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **\[  E'b& >V!!# [ *:;  :; \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**][  E'b& >V!!# [ *:;  :; ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+wowerShell\v1 E'b& >VE'b!# [ *:;  :; ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk^^VKsXDl=f?mMF&**^[  E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# [ *:;  :; ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**_[  E'b& >V!!# [ *:;  :; _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(`[  E'b& >V!!# [ *:;  :; ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@a[  E'b& >V!!# [ *:;  :; a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0b[  E'b& >V!!# [ *:;  :; b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** c[  E'b& >V!!# [ *:;  :; c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** d[  E'b& >V!!# [ *:;  :; d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **e[  E'b& >V!!# [ *:;  :; e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**f[  E'b& >V!!# [ *:;  :; f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(g[  E'b& >V!!# [ *:;  :; g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@h]Lr E'b& >V!!# ]Lrږe=e h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**i]Lr E'b& >V!!# ]Lrږe=e i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **j]Lr E'b& >V!!# ]Lrږe=e j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **k]Lr E'b& >V!!# ]Lrږe=e k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** l]Lr E'b& >V!!# ]Lrږe=e l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **m]Lr E'b& >V!!# ]Lrږe=e m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**n]Lr E'b& >V!!# ]Lrږe=e n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**o]Lr E'b& >V!!# ]Lrږe=e o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0psr E'b& >V!!# srږe=e p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**qsr E'b& >V!!# srږe=e q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**rsr E'b& >V!!# srږe=e r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**ssr E'b& >V!!# srږe=e s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**tsr E'b& >V!!# srږe=e t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** usr E'b& >V!!# srږe=e u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **vsr E'b& >V!!# srږe=e v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**wsr E'b& >V!!# srږe=e w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**xsr E'b& >V!!# srږe=e x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ysr E'b& >V!!# srږe=e y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(zr E'b& >V!!# rږe=e z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@{r E'b& >V!!# rږe=e { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0|r E'b& >V!!# rږe=e | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** }r E'b& >V!!# rږe=e } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ~r E'b& >V!!# rږe=e ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **r E'b& >V!!# rږe=e  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**r E'b& >V!!# rږe=e  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(r E'b& >V!!# rږe=e  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** :t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** :t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** :t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**:t E'b& >V!!# :tږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(at E'b& >V!!# atږete , ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678910**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **u E'b& >V!!# uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** u E'b& >V!!#  uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( u E'b& >V!!#  uږee@t  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** _/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USd C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789K0**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&d C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** _/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** _/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(_/ E'b& >V!!# _/9&9d  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .td C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 > E'b& >V 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkEEpTt7Dl=f?mMF5<&**K0 E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,a** K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0i **K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe : **(K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy(**@K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyroso@**0K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss ttws-I0** K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMft-W ** K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMindo **K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6o**K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0o**(K0 E'b& >V!!# K099  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyyr(**@a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25<6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1@**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(a0 E'b& >V!!# a09 9@  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t@ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy ** ړ E'b& >V!!# ړDMEM   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0** ړ E'b& >V!!# ړDMEM   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00** ړ E'b& >V!!# ړDMEM   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0 ړ E'b& >V!!# ړDMEM   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0** ړ E'b& >V!!# ړDMEM   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ړ E'b& >V!!# ړDMEM  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** @ܓ E'b& >V!!# @ܓDMEM`$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **@ܓ E'b& >V!!# @ܓDMEM`$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** @ܓ E'b& >V!!# @ܓDMEM`$  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**!@ܓ E'b& >V!!# @ܓDMEM`$! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** "@ܓ E'b& >V!!# @ܓDMEM`$" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **#@ܓ E'b& >V!!# @ܓDMEM`$# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**$@ܓ E'b& >V!!# @ܓDMEM`$$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**%@ܓ E'b& >V!!# @ܓDMEM`$% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0&@ܓ E'b& >V!!# @ܓDMEM`$& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**'@ܓ E'b& >V!!# @ܓDMEM`$' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**(@ܓ E'b& >V!!# @ܓDMEM`$( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**)@ܓ E'b& >V!!# @ܓDMEM`$) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h***@ܓ E'b& >V!!# @ܓDMEM`$* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** +@ܓ E'b& >V!!# @ܓDMEM`$+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **,@ܓ E'b& >V!!# @ܓDMEM`$, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**-@ܓ E'b& >V!!# @ܓDMEM`$- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**.@ܓ E'b& >V!!# @ܓDMEM`$. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**/@ܓ E'b& >V!!# @ܓDMEM`$/ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(0@ܓ E'b& >V!!# @ܓDMEM`$0 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@1@ܓ E'b& >V!!# @ܓDMEM`$1 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**02@ܓ E'b& >V!!# @ܓDMEM`$2 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** 3@ܓ E'b& >V!!# @ܓDMEM`$3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** 4@ܓ E'b& >V!!# @ܓDMEM`$4 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **5@ܓ E'b& >V!!# @ܓDMEM`$5 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**6@ܓ E'b& >V!!# @ܓDMEM`$6 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(7@ܓ E'b& >V!!# @ܓDMEM`$7 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t`C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** 8tݓ E'b& >V!!# tݓDMH3EM< 48 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ25< ten-US< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **9tݓ E'b& >V!!# tݓDMH3EM< 49 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**:tݓ E'b& >V!!# tݓDMH3EM< 4: ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**;tݓ E'b& >V!!# tݓDMH3EM< 4; ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** <tݓ E'b& >V!!# tݓDMH3EM< 4< ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **=tݓ E'b& >V!!# tݓDMH3EM< 4= ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**>tݓ E'b& >V!!# tݓDMH3EM< 4> ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**?tݓ E'b& >V!!# tݓDMH3EM< 4? ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0@tݓ E'b& >V!!# tݓDMH3EM< 4@ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**Atݓ E'b& >V!!# tݓDMH3EM< 4A ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**Btݓ E'b& >V!!# tݓDMH3EM< 4B ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**Ctݓ E'b& >V!!# tݓDMH3EM< 4C ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**Dtݓ E'b& >V!!# tݓDMH3EM< 4D ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** Etݓ E'b& >V!!# tݓDMH3EM< 4E ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow owerShell\v1 E'b& >VE'b!# tݓDMH3EM< 4F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnkFF4~m}Dl=f?mMF"&**Ftݓ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# tݓDMH3EM< 4F ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ..Ŀ[9T&DD EventDataA;loData= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**Gtݓ E'b& >V!!# tݓDMH3EM< 4G ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**Htݓ E'b& >V!!# tݓDMH3EM< 4H ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**Itݓ E'b& >V!!# tݓDMH3EM< 4I ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(Jtݓ E'b& >V!!# tݓDMH3EM< 4J ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@Ktݓ E'b& >V!!# tݓDMH3EM< 4K ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0Ltݓ E'b& >V!!# tݓDMH3EM< 4L ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** Mtݓ E'b& >V!!# tݓDMH3EM< 4M ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** Ntݓ E'b& >V!!# tݓDMH3EM< 4N ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **Otݓ E'b& >V!!# tݓDMH3EM< 4O ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**Ptݓ E'b& >V!!# tݓDMH3EM< 4P ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(Qtݓ E'b& >V!!# tݓDMH3EM< 4Q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t< C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(**@Rbm E'b& >V!!# bm@D6G6$ R ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2"6Ƣ2EìJE킿WDA+l= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-US$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exenal @**Sbm E'b& >V!!# bm@D6G6$ S ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2 **Tbm E'b& >V!!# bm@D6G6$ T ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe . **Ubm E'b& >V!!# bm@D6G6$ U ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe , ** Vbm E'b& >V!!# bm@D6G6$ V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0tio **Wbm E'b& >V!!# bm@D6G6$ W ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0n**Xbm E'b& >V!!# bm@D6G6$ X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0f**Ybm E'b& >V!!# bm@D6G6$ Y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $r**0Zbm E'b& >V!!# bm@D6G6$ Z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789t-Wi0**[bm E'b& >V!!# bm@D6G6$ [ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-i**\bm E'b& >V!!# bm@D6G6$ \ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2i**]bm E'b& >V!!# bm@D6G6$ ] ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**^bm E'b& >V!!# bm@D6G6$ ^ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** _bm E'b& >V!!# bm@D6G6$ _ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **`bm E'b& >V!!# bm@D6G6$ ` ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**abm E'b& >V!!# bm@D6G6$ a ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**bbm E'b& >V!!# bm@D6G6$ b ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**cbm E'b& >V!!# bm@D6G6$ c ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(dbm E'b& >V!!# bm@D6G6$ d ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ebm E'b& >V!!# bm@D6G6$ e ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0fbm E'b& >V!!# bm@D6G6$ f ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** gbm E'b& >V!!# bm@D6G6$ g ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** hbm E'b& >V!!# bm@D6G6$ h ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ibm E'b& >V!!# bm@D6G6$ i ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**jbm E'b& >V!!# bm@D6G6$ j ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(kbm E'b& >V!!# bm@D6G6$ k ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t$C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** l E'b& >V!!# @D6"l60 l ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **m E'b& >V!!# @D6"l60 m ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**n E'b& >V!!# @D6"l60 n ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**o E'b& >V!!# @D6"l60 o ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** p E'b& >V!!# @D6"l60 p ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **q E'b& >V!!# @D6"l60 q ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**r E'b& >V!!# @D6"l60 r ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**s E'b& >V!!# @D6"l60 s ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0t E'b& >V!!# @D6"l60 t ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**u E'b& >V!!# @D6"l60 u ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**v E'b& >V!!# @D6"l60 v ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**w E'b& >V!!# @D6"l60 w ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**x E'b& >V!!# @D6"l60 x ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** y E'b& >V!!# @D6"l60 y ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **z E'b& >V!!# @D6"l60 z ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**{ E'b& >V!!# @D6"l60 { ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**| E'b& >V!!# @D6"l60 | ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**} E'b& >V!!# @D6"l60 } ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(~ E'b& >V!!# @D6"l60 ~ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0 E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0**  E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM **  E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM ** E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**( E'b& >V!!# @D6"l60  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 01234567890**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(,&_ E'b& >V!!# ,&_@D6G6 X ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2" ten-USxC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $.**0ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 012345678950**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0 **ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :**(ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyy*(**@ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .t&xC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyy@**0ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt0** ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AM ** ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PM **ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(ɳxB E'b& >V!!# ɳxB23x  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .txC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(  E'b& >V ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational ElfChnk--pkJaSDl=f?mMF& **DzB E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID ! >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ26Ƣ2EìJE킿W0$DD EventDataA=loData= LocaleName A!l=Flags A)l= ProcessId A-l= ProdessName A+l= ReturnCode  ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe**(DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . .Ŀ[9TDA)l= ProcessId A-l= ProdessName A#l=Locale A#l=LCType A'l=lpLCData tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2r(**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .r**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,r** DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0?w **DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0I**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0o**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $c**0DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ft-W0**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-W**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2W**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .c**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,W** DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(DzB E'b& >V!!# DzB2,3 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(i{B E'b& >V!!# i{B230 ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t&C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6**HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(HrY E'b& >V!!# HrY97`B/:7`\ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** !\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-US C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ** !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2** !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .** !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,**  !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy ** !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .h**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,3** !\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0dow **!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 1w**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe P+w**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe /w**!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe :i**(!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe M/d/yyyyow(**@!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t& C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  dddd, MMMM d, yyyyersh@**0!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe h:mm:ss tt 0** !\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (AMell. ** !\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe )PMexe **!\ E'b& >V!!# !\97`|97`  ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  6** !\ E'b& >V!!# !\97`|97`   ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  0**(!!\ E'b& >V!!# !\97`|97` ! ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . t C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe MMMM yyyy(** "ʣ] E'b& >V!!# ʣ]97`97`" ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational 6Ƣ2 ten-USC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe **#ʣ] E'b& >V!!# ʣ]97`97`# ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2**$ʣ] E'b& >V!!# ʣ]97`97`$ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .**%ʣ] E'b& >V!!# ʣ]97`97`% ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ,** &ʣ] E'b& >V!!# ʣ]97`97`& ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 3;0yyy **'ʣ] E'b& >V!!# ʣ]97`97`' ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0**(ʣ] E'b& >V!!# ʣ]97`97`( ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 00**)ʣ] E'b& >V!!# ʣ]97`97`) ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $w**0*ʣ] E'b& >V!!# ʣ]97`97`* ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 0123456789ell\0**+ʣ] E'b& >V!!# ʣ]97`97`+ ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Q-h**,ʣ] E'b& >V!!# ʣ]97`97`, ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 2h**-ʣ] E'b& >V!!# ʣ]97`97`- ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational . tC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe .hl\v1.0\power E'b& >VE'b!# ʣ]97`97`. ذĤi 2Microsoft-Windows-International+:WcL.?w;Microsoft-Windows-International/Operational .