ElfFilejElfChnkȰnEventID><Version>%12</Version><Level>%1</Level><Task>%3</Task><Opcode>%2</Opcode><Keywords>%6</Keywords><TimeCreated SystemTime='%7'/><EventRecordID> %11 </EventRecordID><Correlation ActivityID='%8' RelatedActivityID='%19'/><Execution ProcessID='%9' ThreadID='%10' /><Channel>Application</Channel><Computer>FILF-APP-REC</Computer><Security UserID='%13'/></System>%20</Event>0|}*<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Security-SPP' Guid='{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}' EventSourceName='Software Protection Platform Service'/><EventID Qualifiers='%5'>%4</EventID><Version>%12</Version><Level>%1</Level><Task>%3</Task><Opcode>%2</Opcode><Keywords>%6</Keywords><TimeCreated SystemTime='%7'/><EventRecordID> %11 </EventRecordID><Correlation ActivityID='%8' RelatedActivityID='%19'/><Execution ProcessID='%9' ThreadID='%10' /><Channel>Application</Channel><Computer>FILF-APP-REC</Computer><Security UserID='%13'/></System><UserData>%20</UserData></Event>004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 14: dcb88f6f-b090-405b-850e-dabcccf3693f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 15: f002931d-5536-4908-8d93-40ae584e24d*Pctc[0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 16: 9d0bb49b-21a1-4354-9981-ec5dd9393961, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] mLMEMP(c c-*Pctc Protection Platform ServiceFILF-APP-REC55c92734-d682-4d71-983e-d6ec3f16059f 1: 20e938bb-df44-45ee-bde1-4e4fe7477f37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 439e8c91-ff38-4ecb-ba0b-32658680c952, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 4: 5b338ef7-8d99-45cb-bb59-618bd328b4a4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 5: 979d2e65-04b7-44c9-9d7b-ef4028168cba, 1, 0 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )] 6: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: 9e3fde40-d4b3-4c1d-9bde-32735aa19b39, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: acf1b4fd-1c55-4f2d-a60b-415ac958ad88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: b3ca044e-a358-4d68-9883-aaa2941aca99, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 10: c6b0fae3-70ea-4a98-95f2-587dc1ea4131, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: c7e5dd52-ef14-4bf6-bc71-1bf5f5794cd0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 12: d3081572-e3f0-49f5-8b83-ec763c014570, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 14: dcb88f6f-b090-405b-850e-dabcccf3693f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 15: f002931d-5536-4908-8d93-40ae584e24d6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 16: 9d0bb49b-21a1-4354-9981-ec5dd9393961, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] *Pctc&*cc`c`c1c`