ElfFile5_8#ElfChnkll-h]w7 2}| =|{st|nu qtM| uc 6n9ui ~|gmW st_Wif];>c7Tށ o@mr#Ew{oB**+2 &S]`*cGA;M Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAN{Provider+=KNameEventLogAMoaEventID') QualifiersdLevelE{Task$ jKeywordsAP6; TimeCreated'_j<{ SystemTime .F EventRecordID .aChannelSystemB6;nComputerWIN-P4SIAA0SQCOAB@.SecuritycfLUserID ! !y+2 w)Cw)C-Q /xl7D EventData_oData !BinaryH10.00.15063Multiprocessor Free0**+2 & ;!u+2 w)C **H2 uu,V,'vZAMsj5http://schemas.microsoft.com/win/2004/08/events/event^A-$F=)GuidAo  "  Version    i Opcode A6 _  A Correlation\F _ ActivityID o5RelatedActivityID AmW ExecutionHF| ProcessID 9ThreadID  (WIN-P4SIAA0SQCOA@ c !  @ ! H2bD=Microsoft-Windows-Kernel-GeneralOצ]System IS ISZ%ZA\~r7A/_!= MajorVersion A/_!= MinorVersion A/_!= BuildVersion A+_= QfeVersion A3_%=ServiceVersion A'_=BootMode A)_= StartTime  :&2**K2 u  : !K2bD=Microsoft-Windows-Kernel-BootDzMK ^SSystem 7C7C{S5o/Q97A#_=Status A=_/=EnableDisableReason A)_= VsmPolicy **P2 u  : !!P2bD=Microsoft-Windows-Kernel-BootDzMK ^SSystem  ; ;H^FߟUth7A'_=BootType A-_= LoadOptions  NOEXECUTE=OPTIN**P2 u  : {! P2bD=Microsoft-Windows-Kernel-BootDzMK ^SSystem SS/y^q0L@7A3_%=BootMenuPolicy **S2 u  : s!S2bD=Microsoft-Windows-Kernel-BootDzMK ^SSystem HtwHtjIQBnaD87A+_= EntryCount **T2 u  : ! T2bD=Microsoft-Windows-Kernel-BootDzMK ^SSystem {{b(]O]9\P7AC_5=BitlockerUserInputTime  **x b2 u  > ]!@b2bD= Microsoft-Windows-FilterManagercIİSystem //TQM7A-_= FinalStatus A;_-=DeviceVersionMajor A;_-=DeviceVersionMinor A7_)=DeviceNameLength A+_= DeviceName A+_= DeviceTime A5_'=ExtraInfoLength A5_'=ExtraInfoString A'_=FilterID   FileInfoj-\{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Bottom" , "supportedFeatures": "0x00000003" , "instances" : [["40500","0x00000000"]] }j2x**H 2 u  > 1!@2bD= Microsoft-Windows-FilterManagercIİSystem /  Woffrd{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Compression" , "supportedFeatures": "0x00000003" , "instances" : [["40700","0x00000000"]] }j2H**X 2 u  > ;!@2bD= Microsoft-Windows-FilterManagercIİSystem /  WdFilter72{ "flags" : "0x00000030" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Anti-Virus" , "supportedFeatures": "0x00000003" , "instances" : [["328010","0x00000000"]] }j2X**0 A2 u  , )!bA2bD=h Microsoft-Windows-Ntfsz?nMĂSystem A~#A~ R+,;׳7A)_= DriveName A+_= DeviceName AA_3=CorruptionActionState 0C:\Device\HarddiskVolume20**X Az2 u  > ?!@Az2bD= Microsoft-Windows-FilterManagercIİSystem /  FileCryptNMj{ "flags" : "0x00000000" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Encryption" , "supportedFeatures": "0x00000003" , "instances" : [["141100","0x00000000"]] }t2X**2 zoV(zogR%PAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=SerialAo    A6 _  System(WIN-P4SIAA0SQCOA@ c ! !@2h w)C@0\Device\Serial0\Device\Serial000@**63v2 u  P !/763v2bD= Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System WU,We]"R(F15XL7A!_=Group A#_=Number A3_%=IdleStateCount A;_-=IdleImplementation A7_)=NominalFrequency AI_;=MaximumPerformancePercent AI_;=MinimumPerformancePercent AC_5=MinimumThrottlePercent AI_;=PerformanceImplementation   dd **1av2 u  P R!/71av2bD= Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System WU,  dd **v2 u  P R!/7v2bD= Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System WU,  dd **0v2 u  P R!/70v2bD= Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System WU,  dd **@2 u  > #!@2bD=Microsoft-Windows-FilterManagercIİSystem /  npsvctrig!,{ "flags" : "0x00000018" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000000" , "instances" : [["46000","0x00000000"]] }Ƌ2@**2 u  < !2bD=$Microsoft-Windows-Kernel-Power:;3 D^w" 7ִSystem $7$}$\WdX7A!_=State A#_=Reason **2 u  , !b2bD=Microsoft-Windows-Ntfsz?nMĂSystem A~#b0\\?\Volume{df4546ae-0000-0000-0000-100000000000}\Device\HarddiskVolume1**Ƞ2 u  @ g!Ƞ2bD= Microsoft-Windows-Kernel-GeneralOצ]System $3];$3]SW=v7A3_%=HiveNameLength A'_=HiveName A-_= KeysUpdated A+_= DirtyPages F#\SystemRoot\System32\config\DRIVERS**2 u  @ i!2bD=<@Microsoft-Windows-Kernel-GeneralOצ]System $3];@ \Device\HarddiskVolume1\Boot\BCDN**2 u  @ q!2bD=\Microsoft-Windows-Kernel-GeneralOצ]System $3];H$\SystemRoot\System32\Config\SOFTWAREl[:**2 u  @ o!2bD=dMicrosoft-Windows-Kernel-GeneralOצ]System $3];F#\SystemRoot\System32\Config\DEFAULTF**m̓2 u  2 !@m̓2bD=Microsoft-Windows-Wininitmo MrȸKSystem noBU,nۿ]~,)rf7A#_=Config A/_!= IsTestConfig **pYғ2 u  @ q!pYғ2bD=XMicrosoft-Windows-Kernel-GeneralOצ]System $3];H$\SystemRoot\System32\Config\SECURITY**0H2 u  P !BBH2&2|'2|Microsoft-Windows-Directory-Services-SAM O 'JIP^OحSystem EȅEEȅs-Vؘ8ԫA7S=%SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SDA;_-=Default SD String: .O:SYG:SYD:(A;;RC;;;BA)0**ty2 u  @ g!ty2&2|'2hMicrosoft-Windows-Kernel-GeneralOצ]System $3];>\SystemRoot\System32\Config\SAM**2 u  @ !2bD=lpMicrosoft-Windows-Kernel-GeneralOצ]System $3];p8\??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DATS#**y2 u  @ !y2&2|'2lpMicrosoft-Windows-Kernel-GeneralOצ]System $3];l6\??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DATS#** Q 2 u  @ g!Q 2&2|'2 Microsoft-Windows-Kernel-GeneralOצ]System $3];>\SystemRoot\System32\Config\BBI**X!A 2 u  > ?!@A 2bD=h!Microsoft-Windows-FilterManagercIİSystem /   wcifsgD"{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000000" , "instances" : [["189900","0x00000000"]] }  2X**X"O2 u  > ?!@O2bD= "Microsoft-Windows-FilterManagercIİSystem /   luafv4NL{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000003" , "instances" : [["135000","0x00000000"]] } +2X**x#+2 HTHd|[XAMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerF&{555908d1-a6d7-4695-8e1e-26931d2012f4}aU@`EventSourceNameService Control ManagerAo       i  A6 _  A F  AW F|   System(WIN-P4SIAA0SQCOA@ c ! !X+2ll# ڝ^Wڝ^xW &vA.wk7A#_=param1 A#_=param2    CldFlt%%50CldFltx**h$2 u  > M!@2 = = $Microsoft-Windows-FilterManagercIİSystem /  storqosflt3 9{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Quota Management" , "supportedFeatures": "0x00000003" , "instances" : [["244000","0x00000000"]] } L2h**P%2 u  : 9!Dt 2bD=8%Microsoft-Windows-Dhcp-ClientrNMfjSystem  L\ LNcT 7P**(&2 u  : ! 2bD=8&Microsoft-Windows-Dhcp-ClientrNMfjSystem  L\(**(' 2 u  > !>f 2bD=`'Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem  L\(**(yP72 HT ]!oyP72l( ڝ^WSpooler%%2147942414Spooler**)_2 u  @ !_2x)Microsoft-Windows-Kernel-GeneralOצ]System $3];Z-\??\C:\Windows\AppCompat\Programs\Amcache.hve***p2 HT U!op2l* ڝ^W iphlpsvc%%1058iphlpsvc**+=2 >c\9{WAyAl,7AMsj5http://schemas.microsoft.com/win/2004/08/events/eventA(= WorkstationAo    A6 _  System(WIN-P4SIAA0SQCOA@ c ! 7! =2+ w)CWORKGROUP**(,簙2 HT !r簙2lp, o(ifo(9P𗆤Ϋ<07A#_=param1  CSC dam(**-,]ƙ2 HT  =!@,]ƙ2l- PzGgPzGe\U7A-_= ServiceName A)_= ImagePath A-_= ServiceType A)_= StartType A-_= AccountName fN$UMDF Reflector service for Sensors HID Class Driver\SystemRoot\System32\drivers\WUDFRd.syskernel mode driverdemand start**.j2 ;ɹgi;ɹgRFr"DAMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=Ao       i  A6 _  A F   AW F|    (WIN-P4SIAA0SQCOA@ c $l 5DUserData!  V Q!e' j2bD=h.Microsoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem ni@mniH\??\C:\Users\Default\NTUSER.datS#**2lS2 HT  !@lS2l2 PzGg4N$Bluetooth Radio USB Driver\SystemRoot\system32\DRIVERS\BTHUSB.syskernel mode driverdemand start**3V2 ;ɹgi  2 !]#NV2 ov3Microsoft-Windows-UserPnpP1~z02 ;ɹgi  2 !]!Nz02bD=d>Microsoft-Windows-UserPnpP1~R$Microsoft Streaming Clock Proxy\SystemRoot\system32\DRIVERS\MSPCLOCK.syskernel mode driverdemand start**HI'hU2 ;ɹgi  2 ;!]#N'hU2 ov8 L IMicrosoft-Windows-UserPnpP1~P$Microsoft Trusted Audio Drivers\SystemRoot\system32\DRIVERS\drmkaud.syskernel mode driverdemand start**HRʞ2 ;ɹgi  2 7!]#Nʞ2 ov |RMicrosoft-Windows-UserPnpP1~bth.inf_amd64_ad5d76bee58b2ae3\bth.inf10.0.15063.250MicrosoftBTH\MS_BTHBRB\8&20F38EB4&0&1lGF&;CtMicrosoft Bluetooth Enumerator`**[b&2 HT  !@b&2l[ PzGgPN$Bluetooth Device (Personal Area Network)\SystemRoot\System32\drivers\bthpan.syskernel mode driverdemand start**x\.2 ;ɹgi  2 k!]!N.2 ovl \Microsoft-Windows-UserPnpP1~\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat**P_z>ן2 u  @ 5!z>ן2 ov d _Microsoft-Windows-Kernel-GeneralOצ]System $3]; \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datP**P`2 u  @ 3!2 ov d `Microsoft-Windows-Kernel-GeneralOצ]System $3]; \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy\ActivationStore.datP**Xa%2 u  @ 9!%2 ov d aMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.datX**b(2 u  @ k!(2 ov d bMicrosoft-Windows-Kernel-GeneralOצ]System $3];B\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat**Hc@$2 u  @ /!@$2 ov d cMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datH**8d182 u  @ !182 ov d dMicrosoft-Windows-Kernel-GeneralOצ]System $3];y\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy\ActivationStore.dat8**He`J2 u  @ )!`J2 ov d eMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy\ActivationStore.datH**@f_2 u  @ #!_2 ov d fMicrosoft-Windows-Kernel-GeneralOצ]System $3];}\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.dat@**pgmBt2 u  @ W!mBt2 ov d gMicrosoft-Windows-Kernel-GeneralOצ]System $3];.\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.datp**`h2 u  @ G!2 ov d hMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.15063.332_neutral__cw5n1h2txyewy\ActivationStore.dat`**Xi&2 u  @ ?!&2 ov d iMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datX**`jᬠ2 u  @ A!ᬠ2 ov d jMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.dat`**Pk?2 u  @ 3!?2 ov d kMicrosoft-Windows-Kernel-GeneralOצ]System $3]; \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datP**XlEܠ2 u  @ ?!Eܠ2 ov d lMicrosoft-Windows-Kernel-GeneralOצ]System $3];\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe\ActivationStore.datX u  @ m2 ov d mMicrosoft-Windows-Kernel-GeneralOצ]System $3];$ElfChnkmmx:4=pf?MFe+߾NiW^֙**@mm2 u&u,V,'vZAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerWIN-P4SIAA0SQCOAB.SecurityfLUserID !  @ s!m2 ov d mMicrosoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vD EventDataAEoData%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages $\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dattivi@**n 2 u&  @ a! 2 ov d nMicrosoft-Windows-Kernel-GeneralOצ]System $38\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat!=**o2 u&  @ q!2 ov d oMicrosoft-Windows-Kernel-GeneralOצ]System $3H\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat=**p52 u&  @ i!52 ov d pMicrosoft-Windows-Kernel-GeneralOצ]System $3@\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat****q0N2 u&  @ o!0N2 ov d qMicrosoft-Windows-Kernel-GeneralOצ]System $3F\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat **prC2 u&  @ Q!C2 ov d rMicrosoft-Windows-Kernel-GeneralOצ]System $3(\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy\ActivationStore.datp**sb!2 u&  @ i!b!2 ov d sMicrosoft-Windows-Kernel-GeneralOצ]System $3@\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dataInf**t;á2 u&  @ o!;á2 ov d tMicrosoft-Windows-Kernel-GeneralOצ]System $3F\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat0**urۡ2 u&  @ e!rۡ2 ov d uMicrosoft-Windows-Kernel-GeneralOצ]System $3<\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datss**vzd2 u&  @ g!zd2 ov d vMicrosoft-Windows-Kernel-GeneralOצ]System $3>\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.dat0**w,2 u&  @ g!,2 ov d wMicrosoft-Windows-Kernel-GeneralOצ]System $3>\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat**hx)2 u&  @ K!)2 ov d xMicrosoft-Windows-Kernel-GeneralOצ]System $3"\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy\ActivationStore.datManh**xyw<2 u&  @ [!w<2 ov d yMicrosoft-Windows-Kernel-GeneralOצ]System $32\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.datx**z 0T2 u&  @ q! 0T2 ov d zMicrosoft-Windows-Kernel-GeneralOצ]System $3H\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat\D**{n2 u&  @ m!n2 ov d {Microsoft-Windows-Kernel-GeneralOצ]System $3D\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat_**p|2 u&  @ Q!2 ov d |Microsoft-Windows-Kernel-GeneralOצ]System $3(\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy\ActivationStore.datp**x}Ӕ2 u&  @ [!Ӕ2 ov d }Microsoft-Windows-Kernel-GeneralOצ]System $32\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.datux**h~n2 u&  @ K!n2 ov d ~Microsoft-Windows-Kernel-GeneralOצ]System $3"\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.datysth**hvƢ2 u&  @ O!vƢ2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3&\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dath**Xlm٢2 u&  @ =!lm٢2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat-NX**X[V2 u&  @ ;![V2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dath X**H2 u&  @ /!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\ActivationStore.datHH**Xy2 u&  @ ;!y2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\ActivationStore.datX**X9Τ2 u&  @ ;!9Τ2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\ActivationStore.datConX**H䐥2 u&  @ -!䐥2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\ActivationStore.datH**`^2 u&  @ A!^2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\ActivationStore.datty`**@=2 u&  @ '!=2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\ActivationStore.dati@**H2 u&  @ /!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\ActivationStore.datH**`aQ2 u&  @ C!aQ2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\ActivationStore.datİ`**` 2 u&  @ E! 2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**p¾2 u&  @ S!¾2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3*\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\ActivationStore.datltep**X[2 u&  @ ?![2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\ActivationStore.datvX**H|2 u&  @ /!|2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\ActivationStore.datkH**X2 u&  @ ?!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\ActivationStore.dat X**Pa2 u&  @ 1!a2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\ActivationStore.dat2P**H2 u&  @ )!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\ActivationStore.dat H**H!2 u&  @ )!!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\ActivationStore.dat!H**P­2 u&  @ 5!­2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\ActivationStore.dat>cP**@˱2 u&  @ '!˱2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\ActivationStore.dat@**X@2 u&  @ ;!@2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\ActivationStore.datX**Xz2 u&  @ 9!z2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\ActivationStore.datsjX**`X2 u&  @ A!X2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**Xπ2 u&  @ 9!π2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\ActivationStore.datX**pI2 u&  @ U!I2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3,\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\ActivationStore.dat&Cp**`I-2 u&  @ E!I-2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\ActivationStore.datam`**PѺ2 u&  @ 7!Ѻ2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\ActivationStore.datP**`HU2 u&  @ G!HU2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**X,2 u&  @ ;!,2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\ActivationStore.datX**H~rV2 u&  @ -!~rV2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\ActivationStore.dat̚ H**X2 u&  @ 9!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\ActivationStore.dattem3X**`2 u&  @ G!2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**hJ/߽2 u&  @ I!J/߽2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\ActivationStore.dath**P)2 u&  @ 7!)2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\ActivationStore.datP**P$tq2 u&  @ 7!$tq2 ov d Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\ActivationStore.datyP**SA2 u&  @ !SA2&2|'2$Microsoft-Windows-Kernel-GeneralOצ]System $3U\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.datS** 2 u&  L g!@ 2bD=Microsoft-Windows-UserModePowerService 9@wIŐSystem uu tUMNlS8,A=Turn !9Sy**'t2 u&  @ o!'t2bD=TMicrosoft-Windows-Kernel-GeneralOצ]System iC^eiC^sZuI]System .#$ۏ.#$7Pfvb{|A+= HostOSName A=/=Installwasanupgrade  A;-=HostOSwasWindowsPE  A;-=HostOSmajorversion A;-=HostOSminorversion A;-=HostOSbuildversion AA3=HostOSservicepackName AQC=HostOSservicepackmajorversion AQC=HostOSservicepackminorversion  X  Windows (TM) 10 Preinstallation Environment :4P**p$2 u&  . ! p$2&2y(2TMicrosoft-Windows-Setup>uI]System >+>]d)jw> A#=OSName A-= OSEditionID A3%=OSmajorversion A3%=OSminorversion A3%=OSbuildversion A9+=OSservicepackName AI;=OSservicepackmajorversion AI;=OSservicepackminorversion Windows 10 ProProfessional :****2 S]`*cAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FWIN-P4SIAA0SQCOA  ! !v2 w)C,ۏw)C-Q /J>  p!Binary**02 L)֙,L)9CS`ƗAMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=User32FX&{b0aa8734-56f7-41cc-b2f4-de228e98b946}`EventSourceNameUser32Az      ? fA   AFFmAF System(FWIN-P4SIAA0SQCOA  !  !202 ""D&Z\Vr+8,A#=param1 A#=param2 A#=param3 A#=param4 A#=param5 A#=param6 A#=param7 VF&C:\Windows\system32\winlogon.exe (MINWINPC)WIN-P4SIAA0SQCOOperating System: Upgrade (Planned)0x80020003restartNT AUTHORITY\SYSTEMri**P2 u&  : 9! 2 = =Microsoft-Windows-Dhcp-ClientrNMfjSystem  L LNcT ot\P**(2 u&  : ! 2 = =8Microsoft-Windows-Dhcp-ClientrNMfjSystem  L(**(2 u&  : ! 28Microsoft-Windows-Dhcp-ClientrNMfjSystem  LM(**2 u&  : o!Eu 28Microsoft-Windows-Dhcp-ClientrNMfjSystem bdObdp7X{qSAU@4A'=DwordVal  **m^2  #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! c!{m^2 w)C,@WIN-P4SIAA0SQCODESKTOP-2KGM189.**m^2   k!ym^2 w)C,H10.00.15063Multiprocessor Free0**m^2   ;!um^2 w)C, xy\**`m^2   !}m^2 w)C,HF1460480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-1834596659b8Not AvailableNot Available942048409DESKTOP-2KGM189A-00`**(+@2 VP&VPaY{TAMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FDESKTOP-2KGM189A  ! <  !gm@+@2}8{Microsoft-Windows-Kernel-Power:;3 D^w" 7ִSystem ]@]@ Z myʧA;-=ShutdownActionType A9+=ShutdownEventCode A3%=ShutdownReason (**阎2 VP @ s! 阎2}8{0Microsoft-Windows-Kernel-GeneralOצ]System zmU!zmUb!A[Ф㸚7@4A'=StopTime ݘ2 **2 VP  @ ! 2}8{Microsoft-Windows-Kernel-GeneralOצ]System IS歲ISZ%ZA\~rA/!= MajorVersion A/!= MinorVersion A/!= BuildVersion A+= QfeVersion A3%=ServiceVersion A'=BootMode A)= StartTime  :S2_**42 VP  : !42}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem 7Cय़7C{S5o/Q9A#=Status A=/=EnableDisableReason A)= VsmPolicy **P2 VP  : =!2}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem gɧg+[dfA7)=LastShutdownGood A/!= LastBootGood  A+= LastBootId A7)=BootStatusPolicy   mP** 2 VP  : !! 2}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem  ; ;H^FߟUthA'=BootType A-= LoadOptions  NOEXECUTE=OPTIN ** 2 VP  : {!  2}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem SǻS/y^q0L@A3%=BootMenuPolicy CF**ֵ2 VP  : s!ֵ2}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem HtWHtjIQBnaD8A+= EntryCount  **q2 VP  : ! q2}8{Microsoft-Windows-Kernel-BootDzMK ^SSystem {߾{b(]O]9\PAC5=BitlockerUserInputTime  **xr[2 VP  > ]!@r[2}8{Microsoft-Windows-FilterManagercIİSystem /!/TQMA-= FinalStatus A;-=DeviceVersionMajor A;-=DeviceVersionMinor A7)=DeviceNameLength A+= DeviceName A+= DeviceTime A5'=ExtraInfoLength A5'=ExtraInfoString A'=FilterID   FileInfoj-\{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Bottom" , "supportedFeatures": "0x00000003" , "instances" : [["40500","0x00000000"]] }ǜY2ce x**HZ[2 VP  > 1!@Z[2}8{Microsoft-Windows-FilterManagercIİSystem /  Woffrd{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Compression" , "supportedFeatures": "0x00000003" , "instances" : [["40700","0x00000000"]] }ǜY2H**X[2 VP  > ;!@[2}8{Microsoft-Windows-FilterManagercIİSystem /  WdFilter72{ "flags" : "0x00000030" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Anti-Virus" , "supportedFeatures": "0x00000003" , "instances" : [["328010","0x00000000"]] }[2ws-UX**0j2 VP  , )!bj2}8{hMicrosoft-Windows-Ntfsz?nMĂSystem A~A~ R+,;׳A)= DriveName A+= DeviceName AA3=CorruptionActionState 0C:\Device\HarddiskVolume2-W0**X$3u2 VP  > ?!@$3u2}8{Microsoft-Windows-FilterManagercIİSystem /  FileCryptNMj{ "flags" : "0x00000000" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Encryption" , "supportedFeatures": "0x00000003" , "instances" : [["141100","0x00000000"]] }s2BX**@vm2 VP  > #!@vm2}8{Microsoft-Windows-FilterManagercIİSystem /  npsvctrig!,{ "flags" : "0x00000018" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000000" , "instances" : [["46000","0x00000000"]] }B%2@**~|2 VP  < !~|2}8{Microsoft-Windows-Kernel-Power:;3 D^w" 7ִSystem $i$}$\WdXA!=State A#=Reason i**%w2 VP  , !b%w2}8{hMicrosoft-Windows-Ntfsz?nMĂSystem A~b0\\?\Volume{df4546ae-0000-0000-0000-100000000000}\Device\HarddiskVolume1AN**!f2 VP  P !/7!f2}8{Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System WWe]"R(F15XLA!=Group A#=Number A3%=IdleStateCount A;-=IdleImplementation A7)=NominalFrequency AI;=MaximumPerformancePercent AI;=MinimumPerformancePercent AC5=MinimumThrottlePercent AI;=PerformanceImplementation   dd t-W**2 VP  P R!/72}8{Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd y\A**2 VP  P R!/72}8{Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd gra**2 VP  P R!/72}8{Microsoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd **?!2 ޑNޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  ! ! `?!2 w)C,X,Intel(R) 82574L Gigabit Network Connection,0 ` `C**QD2 ^ Zȴ~AMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FDESKTOP-2KGM189A  $qm5DUserData!  V Q!e' QD2}8{Microsoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem niOniH !>f Jh2}8{(Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem  Lt\(**X2Z2 VP  > ?!@2Z2}8{ Microsoft-Windows-FilterManagercIİSystem /   wcifsgD"{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000000" , "instances" : [["189900","0x00000000"]] } A2X**X42 VP  > ?!@42}8{hMicrosoft-Windows-FilterManagercIİSystem /   luafv4NL{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000003" , "instances" : [["135000","0x00000000"]] } ʞ2m X]; >W>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}Service Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !ElfChnkFF/!1 kz=E;>t?Ƹm+V9#0o~ ng6wB%1/uCiE%**Xʞ2 >&>Qd_)`:{AoM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemA2{ProviderF=KNameService Control ManagerF)Guid&{555908d1-a6d7-4695-8e1e-26931d2012f4}`EventSourceNameService Control ManagerAMSaEventID't) Qualifiers " Version dLevelE{Task Opcode$?jKeywordsAPj; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\F ActivityIDFS5RelatedActivityIDAm ExecutionHF ProcessID9ThreadID .aChannelSystemB+j;nComputerDESKTOP-2KGM189ABt.SecurityfLUserID ! !Xʞ2h ڝ^Dڝ^xW &vA.kD EventDataA5oData=param1 A#=param2  !Binary  CldFlt%%50CldFltpX**oA2 VP~ VPaY{TAMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=AS t      ?Aj   AFF AF  (+DESKTOP-2KGM189At  !  > w!@oA2/|Microsoft-Windows-FilterManagercIİSystem / /TQMkA-= FinalStatus A;-=DeviceVersionMajor A;-=DeviceVersionMinor A7)=DeviceNameLength A+= DeviceName A+= DeviceTime A5'=ExtraInfoLength A5'=ExtraInfoString A'=FilterID   storqosflt3 9{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Quota Management" , "supportedFeatures": "0x00000003" , "instances" : [["244000","0x00000000"]] } ʞ2kag**P#2 VP~   < <!%#2}8{4Microsoft-Windows-Time-ServiceSNʦSystem fx- fx-7z\o |'eAKAkG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.127.197:123)P** 2 >& u!r2hl o(o(9P𗆤Ϋ<0kA#=param1   dam* **'2 >&  '!@'2h PzG%PzGe\UkA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName PN$Microsoft Tunnel Miniport Adapter Driver\SystemRoot\System32\drivers\tunnel.syskernel mode driverdemand start!**L2 n Zȴ~AMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=AS t      ?Aj   AFF AF  (+DESKTOP-2KGM189At  $F5DUserData!  2 X!]!NL2/|lP Microsoft-Windows-UserPnpP1~[ SetupClass ,mM RebootOption  . UpgradeDevice  *k IsDriverOEM  .- InstallStatus 6;MDriverDescription  ZP   Fnettun.inf_amd64_837305602f93b1b9\nettun.inf10.0.15063.0MicrosoftSWD\IP_TUNNEL_VBUS\TEREDO_TUNNEL_DEVICEr6M%+Microsoft Teredo Tunneling Adapter**%2 VP~   @ !%2/| Microsoft-Windows-Kernel-GeneralOצ]System xLxLWְ2_͔kA%=NewTime A%=OldTime A#=Reason $2$2t**H#  VP~   @ /!# /|Microsoft-Windows-Kernel-GeneralOצ]System xL> R2CH**)  VP~   < !4) /|Microsoft-Windows-Time-ServiceSNʦSystem (l9#(l]Xp|]ܜAk;=TMP_EVENT_TIME_JUMP_AUDITA9+=TimeOffsetSeconds  **PW  VP~   < 6!#W /|Microsoft-Windows-Time-ServiceSNʦSystem (sv%(sv]j} # A}kA=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.127.197:123)P**H`  VP~   @ /!` /|Microsoft-Windows-Kernel-GeneralOצ]System xL C nH** VP~   8 !@}8{dxMicrosoft-Windows-DNS-Clientn~Ix=MSystem  (n @\okA)= QueryName A1#= AddressLength A%=Address >_ldap._tcp.dc._msdcs.WORKGROUPser**Hq, VP~   @ /!q,}8{Microsoft-Windows-Kernel-GeneralOצ]System xL ,^-H**r VP~   : !rUC,p Microsoft-Windows-GroupPolicyїELMiSystem ,АUv3j68,kA/!= SupportInfo1 A/!= SupportInfo2 A3%=ProcessingMode AOA=ProcessingTimeInMilliseconds A#=DCName uNo**ۧ VP~   4 !MY ۧUC,Microsoft-Windows-Winlogon|1C̣8System X1/X)P6vmHdXkA=TSId A%=UserSid [**K VP~   @ i!KUC,tMicrosoft-Windows-Kernel-GeneralOצ]System $30$3]SW=vkA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages H$\??\C:\Users\defaultuser0\ntuser.dat`$u&**A VP~   @ !AUC,tMicrosoft-Windows-Kernel-GeneralOצ]System $30F\??\C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat_n**X% VP~  : 5!%I[uES2G [Microsoft-Windows-GroupPolicyїELMiSystem ,u}eX**  MP5(MP!Zpwk&AMsj5http://schemas.microsoft.com/win/2004/08/events/event AF= Microsoft-Windows-DistributedCOMF&{1B562E86-B7AA-4131-BADC-B6F3A001407E}DCOMAS t      ?Aj   AFFAF System(+DESKTOP-2KGM189At  !  ! '` 2U92UUWE-ڟkA#=param1 A#=param2 A#=param3 A#=param4 A#=param5 A#=param6 A#=param7 A#=param8 A#=param9 A%=param10 A%=param11  ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailablee **pf MP5  ! 'f` 2U9 ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailableem p**H | VP~  @ ! |}8{$\[Microsoft-Windows-Kernel-GeneralOצ]System $30z\??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.datH**Hs6 VP~   2 9!s6}8{tMicrosoft-Windows-TPM-WMIS}M fSystem  LwB LNcT kH**C zB9z++Y 5ZAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=LfsvcAS t   ?Aj   System(+DESKTOP-2KGM189At  ! o!C w)CE,w)C-Q /4(k  **Pj VP~  @ #!j{2{2  [Microsoft-Windows-Kernel-GeneralOצ]System $30}\??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat P**   VP~   2 ! {2{2 Microsoft-Windows-TPM-WMIS}M fSystem  LwBepos **| VP~   8 !@|dMicrosoft-Windows-DNS-Clientn~Ix=MSystem  (>_ldap._tcp.dc._msdcs.WORKGROUP\C**`) MP5  ! ')` 2U9 ( LL ,application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailableat`**{G) VP~   @ g!{G)/|<Microsoft-Windows-Kernel-GeneralOצ]System $30>\??\C:\Users\Default\NTUSER.DAT$**.. VP~  @ !../|[Microsoft-Windows-Kernel-GeneralOצ]System $30U\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat¾**60 >&  !@60h PzG%HT"Printer Extensions and Notifications%SystemRoot%\system32\svchost.exe -k printuser mode servicedemand startLocalSystema**60 >& _!v60h o(HPrinter Extensions and Notifications**0]mG >&  w!@]mGhH "eMT"eReRLukA#=param1 A#=param2 A#=param3 A#=param4 NBackground Intelligent Transfer Servicedemand startauto startBITS0*** ^ VP~   @ o!* ^EehMicrosoft-Windows-Kernel-GeneralOצ]System iC^VDiC^sZ_ldap._tcp.dc._msdcs.WORKGROUPu&**H*O VP~   4 7!NZ *OEehMicrosoft-Windows-Winlogon|1C̣8System X1/[ft\H**Htz VP~   4 7!MY tzEehMicrosoft-Windows-Winlogon|1C̣8System X1/[@H**Xm VP~  : 5!muH84K&  !@oh "eMTNBackground Intelligent Transfer Serviceauto startdemand startBITSroso`** 1 VP~  @ !1{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30g\??\C:\Users\tony\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat ** 9᭭ VP~  @ !9᭭{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat **8 VP~  @  !{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30r\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat-8**   VP~  @ ! {2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dativa ** Z VP~  @ !Z{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat3.0_ **8  VP~  @  ! {2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.datdRec8**5ɭ VP~  @ !5ɭ{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30c\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.datr**(`έ VP~  @ !`έ{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30k\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dats(**(qfѭ VP~  @ !qfѭ{2k2`[Microsoft-Windows-Kernel-GeneralOצ]System $30j\??\C:\Users\tony\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.datPr(**`! >&  !@!h "eMTNBackground Intelligent Transfer Servicedemand startauto startBITS`**`? >&  !@?hH "eMTNBackground Intelligent Transfer Serviceauto startdemand startBITSes\M`** I, ޑ6ޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAS t   ?Aj   System(+DESKTOP-2KGM189At  ! !I,  w)CEX,Intel(R) 82574L Gigabit Network Connection,0**P Y, ޑ6 ! `Y,  w)CEX,Intel(R) 82574L Gigabit Network Connection,0 ` `rP**  , VP~   @ o! ,/| Microsoft-Windows-Kernel-GeneralOצ]System iC^VF#\SystemRoot\System32\config\DRIVERSO`O** ;ĉ- ==\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAS t   ?Aj   System(+DESKTOP-2KGM189At  ! U!@;ĉ-  w)CE00@ne** CF- = M!CF-  w)CE((at**#O VP~   @ !#O}8{<8Microsoft-Windows-Kernel-GeneralOצ]System $30h4\??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT**k\ >&  !@k\h0 PzG%,p"TP AutoConnect Service"C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe"user mode serviceauto startLocalSystemnal**1a\ >&   !@1a\h0 PzG%*l"TP VC Gateway Service"C:\Program Files\VMware\VMware Tools\TPVCGateway.exe"user mode serviceauto startLocalSystem**\ >&  !@\h0 PzG%Ff"VMware Physical Disk Helper Service"C:\Program Files\VMware\VMware Tools\vmacthlp.exe"user mode serviceauto startLocalSystemcep**\ >&  M!@\h0 PzG%N"VMware Alias Manager and Ticket Service"C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe"user mode serviceauto startLocalSystem2T**\ >&  ]!@\h0 PzG%J"VMware CAF AMQP Communication Service"C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\CommAmqpListener.exe"user mode servicedemand startLocalSystemckma**\ >&  [!@\h0 PzG%F"VMware CAF Management Agent Service"C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\ManagementAgentHost.exe"user mode serviceauto startLocalSystem**xl2`] >&  !@l2`]h0 PzG%,2$VMware VMCI Bus DriverSystem32\drivers\vmci.syskernel mode driverboot start x**~l] RR+ZO82 AMsj5http://schemas.microsoft.com/win/2004/08/events/eventA=vmciAS t   ?Aj   System(+DESKTOP-2KGM189At  ! !@~l]  w)CED(VMCI: Using capabilities (0xc). ((@@WIN**n] n  2 y!]!Nn]/|xMicrosoft-Windows-UserPnpP1~&  -!@(]hp PzG%~L$vSockets Virtual Machine Communication Interface Sockets driver\SystemRoot\system32\DRIVERS\vsock.syskernel mode driversystem start**] >&  !@]hp "eMT~Windows Socket 2.0 Non-IFS Service Provider Support Environmentdisabledsystem startws2ifsl10**y_ >&  !@y_hx PzG%4V$VMware USB Pointing Device\SystemRoot\System32\drivers\vmusbmouse.syskernel mode driverdemand start**~$_ n  2 !]!N~$_/|dMicrosoft-Windows-UserPnpP1~&  !@`hx PzG%,P$VMware Pointing Device\SystemRoot\System32\drivers\vmmouse.syskernel mode driverdemand start!**P ` n  2 C!]!N`/| Microsoft-Windows-UserPnpP1~&  !@+<`hx! PzG%*R$Memory Control Driver\SystemRoot\system32\DRIVERS\vmmemctl.syskernel mode driverauto start**"` >&  !@`hx" PzG%F6$VMware Host Guest Client Redirectorsystem32\DRIVERS\vmhgfs.syskernel mode driverdemand startQfe**#%a >&  !@%ahx# PzG%6R$VMware Physical Disk Helper\SystemRoot\system32\DRIVERS\vmrawdsk.syskernel mode driversystem start**x$Ob >&  !@Obhx$ PzG% N$vm3dmp\SystemRoot\system32\DRIVERS\vm3dmp.syskernel mode driverdemand startx**%/Rb n  2 !]#N/Rb/|`%Microsoft-Windows-UserPnpP1~&  !@dhp ' PzG%f"VMware Tools"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"user mode serviceauto startLocalSystemSy**H(P3 VP~   @ /!P3/|(Microsoft-Windows-Kernel-GeneralOצ]System xL03 ߈dH** )E3 >&  e!@E3h) PzG%0"2VMware Snapshot ProviderC:\Windows\system32\dllhost.exe /Processid:{74600A00-7492-484F-9A3E-C510CC95F515}user mode servicedemand startNT AUTHORITY\LocalServiceaInf **`*9(3 ^QPVg5en~SoAcMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=User32F&{b0aa8734-56f7-41cc-b2f4-de228e98b946}User32AS t      ?Aj   AFFAF System(+DESKTOP-2KGM189At  !  #!29(3* "|"D&Z\Vr+8,kA#=param1 A#=param2 A#=param3 A#=param4 A#=param5 A#=param6 A#=param7 N&msiexec.exeDESKTOP-2KGM189No title for this reason could be found0x80030002restartThe Windows Installer initiated a system restart to complete or continue the configuration of 'VMware Tools'.NT AUTHORITY\SYSTEM>`**H+y3 VP~   4 7!NZ y3/|+Microsoft-Windows-Winlogon|1C̣8System X1/[gisH**h,E3 MP5  !'E3l, "eMT L1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED}2801h**-=3  nB #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAS t   ?Aj   System(+DESKTOP-2KGM189At  ! +!v=3- w)CEg**(.w)3 VP~   : ! w)3/|.Microsoft-Windows-Dhcp-ClientrNMfjSystem  LwB(**(/6,3 VP~   : ! 6,3/|/Microsoft-Windows-Dhcp-ClientrNMfjSystem  LwBname(**03 VP~   > o!?g 3(0Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem bdC^bdp7X{qSAU@4kA'=DwordVal **013 VP~   > !hq 3(1Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem bdCon0**02[3 VP~   > !hq [3(2Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem bdC000**(3}.3 VP~   : ! }.33Microsoft-Windows-Dhcp-ClientrNMfjSystem  LwBerne(**04W3 VP~   : !Eu W34Microsoft-Windows-Dhcp-ClientrNMfjSystem bdC,0**5-3  n k!y-35 w)CEH10.00.15063Multiprocessor Free0}\**6-3  n ;!u-36 w)CE %X**X7-3  n !}-37 w)CEFF860480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189X**8dX83 VP~  <  !gm@dX83&_8Microsoft-Windows-Kernel-Power:;3 D^w" 7ִSystem ]@]@ Z myʧkA;-=ShutdownActionType A9+=ShutdownEventCode A3%=ShutdownReason **9fv3 VP~  @ s! fv3&_\9Microsoft-Windows-Kernel-GeneralOצ]System zmUzmUb!A[Ф㸚7@4kA'=StopTime ~fv3**:;[(3 VP~   @ ! ;[(3&_:Microsoft-Windows-Kernel-GeneralOצ]System ISuMTISZ%ZA\~rkA/!= MajorVersion A/!= MinorVersion A/!= BuildVersion A+= QfeVersion A3%=ServiceVersion A'=BootMode A)= StartTime  :oI(3**;P[(3 VP~   : !P[(3&_;Microsoft-Windows-Kernel-BootDzMK ^SSystem 7Cg7C{S5o/Q9kA#=Status A=/=EnableDisableReason A)= VsmPolicy **P<[(3 VP~   : =![(3&_<Microsoft-Windows-Kernel-BootDzMK ^SSystem gog+[dfkA7)=LastShutdownGood A/!= LastBootGood  A+= LastBootId A7)=BootStatusPolicy   P**=5[(3 VP~   : !!5[(3&_=Microsoft-Windows-Kernel-BootDzMK ^SSystem  ; ;H^FߟUthkA'=BootType A-= LoadOptions  NOEXECUTE=OPTINUse**>9[(3 VP~   : {! 9[(3&_>Microsoft-Windows-Kernel-BootDzMK ^SSystem SS/y^q0L@kA3%=BootMenuPolicy **?[(3 VP~   : s![(3&_?Microsoft-Windows-Kernel-BootDzMK ^SSystem Ht|HtjIQBnaD8kA+= EntryCount ID**@w[(3 VP~   : ! w[(3&_@Microsoft-Windows-Kernel-BootDzMK ^SSystem {{b(]O]9\PkAC5=BitlockerUserInputTime  ,)r**8A,*3 R !@,*3A w)CED(VMCI: Using capabilities (0xc). ((@@8**PBbq+3 VP~   > 3!@bq+3&_BMicrosoft-Windows-FilterManagercIİSystem /  FileInfoj-\{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Bottom" , "supportedFeatures": "0x00000003" , "instances" : [["40500","0x00000000"]] }J+3AP**HC<+3 VP~   > 1!@<+3&_CMicrosoft-Windows-FilterManagercIİSystem /  Woffrd{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Compression" , "supportedFeatures": "0x00000003" , "instances" : [["40700","0x00000000"]] }J+3H**XDF+3 VP~   > ;!@F+3&_DMicrosoft-Windows-FilterManagercIİSystem /  WdFilter72{ "flags" : "0x00000030" , "registration_version" : "0x00000203" , "tx" : true , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Anti-Virus" , "supportedFeatures": "0x00000003" , "instances" : [["328010","0x00000000"]] }J+3X**0EW+3 VP~   , )!bW+3&_hEMicrosoft-Windows-Ntfsz?nMĂSystem A~iA~ R+,;׳kA)= DriveName A+= DeviceName AA3=CorruptionActionState 0C:\Device\HarddiskVolume240**XF9+3 VP~   > ?!@9+3&_FMicrosoft-Windows-FilterManagercIİSystem /  FileCryptNMj{ "flags" : "0x00000000" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Encryption" , "supportedFeatures": "0x00000003" , "instances" : [["141100","0x00000000"]] }}9+3X >W>Q VP~   > ft@+3&_GMicrosoft-Windows-FilterManagercIİSystem / d2012f4}Service Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !ElfChnkGG@=?n&=3fn$?#MF$6>mkMNo&ew;Y Buc%x#2*C(`**@ G+3 VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  > {!@+3&_GMicrosoft-Windows-FilterManagercIİSystem //TQM@4D EventDataA?oData= FinalStatus A;-=DeviceVersionMajor A;-=DeviceVersionMinor A7)=DeviceNameLength A+= DeviceName A+= DeviceTime A5'=ExtraInfoLength A5'=ExtraInfoString A'=FilterID   npsvctrig!,{ "flags" : "0x00000018" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000000" , "instances" : [["46000","0x00000000"]] }$+3w@ **Hhۿ+3 VP&  < !hۿ+3&_HMicrosoft-Windows-Kernel-Power:;3 D^w" 7ִSystem $Y $}$\WdXA!=State A#=Reason e**I+3 VP&  , !b+3&_hIMicrosoft-Windows-Ntfsz?nMĂSystem A~A~ R+,;׳A)= DriveName A+= DeviceName AA3=CorruptionActionState b0\\?\Volume{df4546ae-0000-0000-0000-100000000000}\Device\HarddiskVolume10000**J+3 VP&  P !/7+3&_JMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System WWe]"R(F15XLA!=Group A#=Number A3%=IdleStateCount A;-=IdleImplementation A7)=NominalFrequency AI;=MaximumPerformancePercent AI;=MinimumPerformancePercent AC5=MinimumThrottlePercent AI;=PerformanceImplementation   dd ****K+3 VP&  P R!/7+3&_KMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd )**L+3 VP&  P R!/7+3&_LMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd n**M18+3 VP&  P R!/718+3&_MMicrosoft-Windows-Kernel-Processor-PowergQNo)H`'System W  dd F**pNK,3 ޑޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  ! `K,3N w)C`w)C-Q /J>  !BinaryX,Intel(R) 82574L Gigabit Network Connection,0 ` `p**OTvQ,3 ==\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@TvQ,3O w)C`00@**PTvQ,3 = M!TvQ,3hP w)C`((**QUh%-3 6  Zȴ~AMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FDESKTOP-2KGM189A  $I"m5DUserData!  V Q!e' Uh%-3&_QMicrosoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem nix#niH|-3 VP&  > ?!@9>|-3&_UMicrosoft-Windows-FilterManagercIİSystem /   wcifsgD"{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000000" , "instances" : [["189900","0x00000000"]] } T z-3teX**XVt-3 VP&  > ?!@t-3&_VMicrosoft-Windows-FilterManagercIİSystem /   luafv4NL{ "flags" : "0x00000014" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000003" , "instances" : [["135000","0x00000000"]] } 2-3X**xW2-3 >2>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}3`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  ! !X2-3P0W ڝ^$6ڝ^xW &vA.wkA#=param1 A#=param2    CldFlt%%50CldFltC-x**hX-3 VP&  > M!@-3_#XMicrosoft-Windows-FilterManagercIİSystem /  storqosflt3 9{ "flags" : "0x00000010" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Quota Management" , "supportedFeatures": "0x00000003" , "instances" : [["244000","0x00000000"]] } 2-3h**PYm-3 VP&  : 9!Dt m-3&_$YMicrosoft-Windows-Dhcp-ClientrNMfjSystem  Lw; LNcT B9P**(Z-3 VP&  : ! -3&_$ZMicrosoft-Windows-Dhcp-ClientrNMfjSystem  Lw;MP5(**([,.3 VP&  > !>f ,.3&_$[Microsoft-Windows-DHCPv6-Client+jj8L\;gxSystem  Lw;A8(** \ /3 >2 u!r /3PT\ o(>o(9P𗆤Ϋ<0A#=param1   damm **]33 VP&  8 !@33&_ ]Microsoft-Windows-DNS-Clientn~Ix=MSystem  5@6 @\oA)= QueryName A1#= AddressLength A%=Address >_ldap._tcp.dc._msdcs.WORKGROUP2**^ ^3 VP&  4 !MY ^3&_p^Microsoft-Windows-Winlogon|1C̣8System XBX)P6vmHdXA=TSId A%=UserSid [** _(ǁ^3 MPC5@MP!Zpwk&AMsj5http://schemas.microsoft.com/win/2004/08/events/event AF= Microsoft-Windows-DistributedCOMFX&{1B562E86-B7AA-4131-BADC-B6F3A001407E}3DCOMAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  ! '(ǁ^3_ 2UG2UUWE-ڟA#=param1 A#=param2 A#=param3 A#=param4 A#=param5 A#=param6 A#=param7 A#=param8 A#=param9 A%=param10 A%=param11  ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable **p`(ǁ^3 MPC  ! '(ǁ^3` 2UG ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailablelabp**a%BGv3 VP& @ !%BGv3&_  a[Microsoft-Windows-Kernel-GeneralOצ]System $3MN$3]SW=vA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.datcros**pbx3 MPC  ! 'x3Db 2UG ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailablep**hcx3 MPC  ! 'x3Dc 2UG  LL,machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailableph**pdx3 MPC  ! 'x3Dd 2UG ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable!p**hex3 MPC  ! 'x3De 2UG  LL,machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailableh**feЋy3 VP& @ !eЋy3_# f[Microsoft-Windows-Kernel-GeneralOצ]System $3MN^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat**(gߪhz3 VP& @ !ߪhz3_#\g[Microsoft-Windows-Kernel-GeneralOצ]System $3MNi\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.datt(**h\{3 zF^Gz++Y 5ZAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=LfsvcAz    fA   System(FDESKTOP-2KGM189A  ! #!\{3h w)C`**i{3 VP& @ !{3_#Ti[Microsoft-Windows-Kernel-GeneralOצ]System $3MNb\??\C:\Users\tony\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat(U**0jG93 >2  w!@G93P@j "euc"eReRLuA#=param1 A#=param2 A#=param3 A#=param4 NBackground Intelligent Transfer Servicedemand startauto startBITSger0**ky*  eF^ #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}y*k w)C`JF32260480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189P**Pl1s3 ޑ !1s3l w)C`X,Intel(R) 82574L Gigabit Network Connection,0 P**mc* VP&  @ !c*_#\L mMicrosoft-Windows-Kernel-GeneralOצ]System xLmkxLWְ2_͔A%=NewTime A%=OldTime A#=Reason *e3?\C**Pn4\. ޑ ! `4\.n w)C`X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**oMf = U!@Mf o w)C`00@oc**pwf = M!wf p w)C`((**q VP& @ ! q[Microsoft-Windows-Kernel-GeneralOצ]System $3MN_\??\C:\Users\tony\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat**rB/ VP&  8 !@B/ rMicrosoft-Windows-DNS-Clientn~Ix=MSystem  5@>_ldap._tcp.dc._msdcs.WORKGROUPva**sr VP&  8 !@r&_ sMicrosoft-Windows-DNS-Clientn~Ix=MSystem  5@>_ldap._tcp.dc._msdcs.WORKGROUPin**Xt >2  !@P0t "euc2 Windows Modules Installerdemand startauto startTrustedInstallerm X**`uv 3  e !}v 3u w)C`JF37660480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189?\C`**Pv ޑ !v w)C`X,Intel(R) 82574L Gigabit Network Connection,0`P**HwC]3 VP&  @ /!C]3_#\L wMicrosoft-Windows-Kernel-GeneralOצ]System xLmk3!FdH**Px%3 ޑ ! `%3x w)C`X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**y}*3 = U!@}*3 y w)C`00@tt**z]+3 = M!]+3z w)C`((N**@{03 VP& @ !03duF 0# %hX{[Microsoft-Windows-Kernel-GeneralOצ]System $3MNu\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat A@**8|<53 VP& @  !<53rZ|* e|JsH|[Microsoft-Windows-Kernel-GeneralOצ]System $3MNp\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat8**}|3 VP&  8 !@|3 }Microsoft-Windows-DNS-Clientn~Ix=MSystem  5@>_ldap._tcp.dc._msdcs.WORKGROUP**X~s3 >2  !@s3P~ "euc2 Windows Modules Installerauto startdemand startTrustedInstallernfX**(YS^!3 MPC c!'YS^!3[ o(>L{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}(**H!"3 VP&  4 7!NZ !"3_#pMicrosoft-Windows-Winlogon|1C̣8System XB[H**@<^$3 VP&  J ! , <^$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - July 2017 (KB890830)n;nB@҉t@**S^$3 VP&  J ! , S^$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNL**0b^$3 VP&  J  ! , b^$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o2017-07 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4025376)]fILbMwa0**N~$3 VP&  J ! , N~$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oDefinition Update for Windows Defender - KB2267602 (Definition 1.247.865.0)LB7h;MϢ te Man**h8$3 VP&  J A! , 8$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oMSN News~A_lh**9$3 VP&  J ! , 9$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oXMicrosoft .Net Native Framework Package 1.6v߇A;Bbɇ5lSys**Hl$3 VP&  J u! , Hl$3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oFMicrosoft Advertising SDK for XAMLa$pwDP"\**H<)3 VP&  4 7!MY <)3PlMicrosoft-Windows-Winlogon|1C̣8System XB[G%H**A)3 VP&  @ a!A)3DMicrosoft-Windows-Kernel-GeneralOצ]System $3MN8\??\C:\Users\tony\ntuser.dat> ent**-)3 VP&  @ !-)3DMicrosoft-Windows-Kernel-GeneralOצ]System $3MN|>\??\C:\Users\tony\AppData\Local\Microsoft\Windows\UsrClass.datU**p*3 MPC  ! '*3 2UG ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailableD&Rp**h*3 VP&  J A! + *3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oWindows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - July 2017 (KB890830)n;nB@҉th**p*3 MPC  ! '*3 2UG ( LL,application-specificLocalActivation{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailablep** y*3 VP& @ !y*3_#[Microsoft-Windows-Kernel-GeneralOצ]System $3MNf\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.datV **8)H~*3 VP& @  !)H~*3_#[Microsoft-Windows-Kernel-GeneralOצ]System $3MNr\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat~8** .3 VP& @ !.3_#H[Microsoft-Windows-Kernel-GeneralOצ]System $3MNd\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.datmous **X͜93 VP&  @ ;!͜93PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x64__8wekyb3d8bbwe\ActivationStore.datI_0X**X$>3 VP&  @ ;!$>3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x86__8wekyb3d8bbwe\ActivationStore.datX**'A3 VP&  J ! , 'A3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oTMicrosoft .Net Native Runtime Package 1.64$L{w}U^03**IA3 VP&  J W! , IA3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o(Phototastic Collage5~pKn)stem**XؘC3 >2  !@ؘC3P0 "euc2 Windows Modules Installerdemand startauto startTrustedInstallerX**2;KD3 VP&  @ !2;KD3_#Microsoft-Windows-Kernel-GeneralOצ]System $3MNh4\??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAThysi**r^D3 VP&  J _! r^D3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC nC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - July 2017 (KB890830)n;nB@҉tCCpe,w}**0z^D3 VP&  J  ! + z^D3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o2017-07 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4025376)]fILb5A0**XD3 >2  !@D3P0 "euc2 Windows Modules Installerauto startdemand startTrustedInstallerrPX**HbC$E3 VP&  @ +!bC$E3_#(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.21.1434.0_x64__8wekyb3d8bbwe\ActivationStore.dat H**@pn.E3 VP&  J ! pn.E3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC 2017-07 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4025376)]fILbCCpe,w@***H3 VP&  J ! + *H3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oDefinition Update for Windows Defender - KB2267602 (Definition 1.247.865.0)LB7h;MϢ teHORI**h0*H3 VP&  J A! + 0*H3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oMSN News~A_l8eh**x('I3 VP&  J U! ('I3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC MSN News~A_l|^LEPBx**8'I3 VP&  J m! , 8'I3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o>Microsoft Engagement FrameworkEsEG &**C'I3 VP&  J W! , C'I3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o(Phototastic Collage5~pKn) co**J'I3 VP&  J u! , J'I3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oFMicrosoft Advertising SDK for XAMLa$pwDP"S**XJ3 VP&  @ ;!J3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x86__8wekyb3d8bbwe\ActivationStore.dat04X**X8,L3 VP&  @ ;!8,L3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat X**h1L3 VP&  @ M!1L3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe\ActivationStore.dat h**XjM3 VP&  @ ;!jM3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x64__8wekyb3d8bbwe\ActivationStore.datP~ X**h>zN3 VP&  @ M!>zN3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dath**h.4KO3 VP&  @ M!.4KO3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe\ActivationStore.dath**XO3 VP&  @ ;!O3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat-18X**h9P3 VP&  @ M!9P3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dathuh**hQ3 VP&  @ M!Q3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe\ActivationStore.dat:h**XQ3 VP&  @ ;!Q3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1706.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat**X**hzR3 VP&  @ M!zR3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dat:h**hS3 VP&  @ M!S3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dath**8U3 VP&  J W! , 8U3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o(Phototastic Collage+>aBA**hċ8U3 VP&  J ?! , ċ8U3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oTwittervH`)9L7oV1**h**hV3 VP&  J ?! , V3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oTwitter$rO:Mslunth**V3 VP&  J [! , V3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o,Candy Crush Soda Saga@M&sH;ɀnck**8Lb3 VP&  @ !Lb31l"2$C[J7T(Microsoft-Windows-Kernel-GeneralOצ]System $3MN{\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\9E2F88E3.Twitter_5.8.1.0_x86__wgeqdkkx372wm\ActivationStore.datc8**8Wf3 VP&  @ !Wf3(Microsoft-Windows-Kernel-GeneralOצ]System $3MN{\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\9E2F88E3.Twitter_5.8.1.0_x86__wgeqdkkx372wm\ActivationStore.date8**`Γg3 VP&  @ E!Γg3(`Microsoft-Windows-Kernel-GeneralOצ]System $3MN\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\ThumbmunkeysLtd.PhototasticCollage_2.0.74.0_x64__nfy108tqq3p12\ActivationStore.dat "`**qg3 VP&  J ! + qg3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oXMicrosoft .Net Native Framework Package 1.6v߇A;Bbɇ5 **qg3 VP&  J ! qg3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC XMicrosoft .Net Native Framework Package 1.6v߇A;Bbɇ5|^LEPBal**i3 VP&  J ! + i3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oTMicrosoft .Net Native Runtime Package 1.64$L{w}U^**i3 VP&  J ! i3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC TMicrosoft .Net Native Runtime Package 1.64$L{w}U^|^LEPBF**Ei3 VP&  J m! + Ei3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  o>Microsoft Engagement FrameworkEsEG &"**nNm3 VP&  J ! nNm3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC >Microsoft Engagement FrameworkEsEG &|^LEPB**hNm3 VP&  J ?! + Nm3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  oTwitter$rO:Mslf4}h**xNm3 VP&  J S! Nm3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Twitter$rO:Msl|^LEPBx!ElfChnk;;hi$ Vi̋%$=ޕ–<2?OT֗fp?/~nF 4X= Y&4A5tAvC (TE<**?wo3 VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  J G! , ?wo3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   zPLX D EventDataA?$oData= updateTitle A+$= updateGuid A?$1=updateRevisionNumber VCLibs 12'A=D0Q**ƞq3 VP&  J ! ƞq3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? nC o]kA-$= updateTitle A+$= updateGuid A?$1=updateRevisionNumber A-$= serviceGuid Definition Update for Windows Defender - KB2267602 (Definition 1.247.865.0)LB7h;MϢ teCCpe,w0**Xq3 VP&  @ =!q3PW(3hkW(3(`Microsoft-Windows-Kernel-GeneralOצ]System $3= $3]SW=vA3$%=HiveNameLength A'$=HiveName A-$= KeysUpdated A+$= DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\ThumbmunkeysLtd.PhototasticCollage_2.0.86.0_x64__nfy108tqq3p12\ActivationStore.datceX** :s3 VP& @ !:s3PW(3hkW(3 [Microsoft-Windows-Kernel-GeneralOצ]System $3= d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.datNo)H **=u3 VP&  J m! , =u3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >March of Empires: War of LordsQ#xH`Zmc**z3 VP&  J ! z3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? XMicrosoft .Net Native Framework Package 1.6v߇A;Bbɇ5|^LEPB**z3 VP&  J ! z3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? TMicrosoft .Net Native Runtime Package 1.64$L{w}U^|^LEPB**%z3 VP&  J u! + %z3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  FMicrosoft Advertising SDK for XAMLa$pwDP"W**}3 VP&  J ! }3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? FMicrosoft Advertising SDK for XAMLa$pwDP"|^LEPBess**}3 VP&  J W! + }3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  (Phototastic Collage+>aBA)C-Q** S3 >>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  w!@S3P( "e "eReRLuA#$=param1 A#$=param2 A#$=param3 A#$=param4 NBackground Intelligent Transfer Serviceauto startdemand startBITSi **F"g3 VP&  J k! F"g3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? (Phototastic Collage+>aBA|^LEPBGM**lw3 VP&  J a! , lw3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2Keeper Password ManagerT$o_4Ky *0I"**Pz3 VP&  @ 1!z3PW(3hkW(3(`Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\KeeperSecurityInc.Keeper_10.3.1.0_x64__kejf07qmg0jnm\ActivationStore.datGLP**HU3 VP&  @ -!U3PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.6.0.8_x86__h6adky7gbf63m\ActivationStore.datH**͔3 VP&  J a! + ͔3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2Keeper Password ManagerT$o_4Ky *0P&**ܔ3 VP&  J u! ܔ3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? 2Keeper Password ManagerT$o_4Ky *0|^LEPB**hsA3 VP&  J C! + sA3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  VCLibs 12'A=D0Qerh**A3 VP&  J W! A3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? VCLibs 12'A=D0Q|^LEPB"FSF**A3 VP&  J m! + A3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >March of Empires: War of LordsQ#xH`Zm**A3 VP&  J ! A3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? >March of Empires: War of LordsQ#xH`Zm|^LEPB"cl**p3 VP&  J M! , 3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Royal Revolt 2гI̠sp**VC3 VP&  @ o!VC3PW(3hkW(3tMicrosoft-Windows-Kernel-GeneralOצ]System iC^ 4iC^sZ  !@ں3P0 "e 2 Windows Modules Installerdemand startauto startTrustedInstallerldX**9`3 VP&  @ o!9`3_#Microsoft-Windows-Kernel-GeneralOצ]System iC^ 4F#\SystemRoot\System32\config\DRIVERSOOo**Ul3 VP&  J ! , Ul3PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  \Microsoft-Windows-NetFx3-OnDemand-Package.cabA9Q8?ce**+M3 VP&  @ g!+M3&_Microsoft-Windows-Kernel-GeneralOצ]System $3= >\??\C:\Users\Default\NTUSER.DAT) **h3 >  !@3P( PzGE<PzGe\UA-$= ServiceName A)$= ImagePath A-$= ServiceType A)$= StartType A-$= AccountName d"2Windows Presentation Foundation Font Cache 3.0.0.0%systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exeuser mode servicedemand startNT Authority\LocalService=h**XD3 >  !@D3P( "e 2 Windows Modules Installerauto startdemand startTrustedInstallerX**xz3 >  !@z3P PzGE<J$VMware hcmonC:\Windows\system32\drivers\hcmon.syskernel mode driverauto startx**m3 >  E!@m3P PzGE<<"VMware USB Arbitration Service"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"user mode serviceauto startLocalSystem5@M** 3 >  g!@3P( PzGE<$MpKsl1bb57eadC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{972CA50B-64EC-45FC-A57E-68F894ED5B68}\MpKsl1bb57ead.syskernel mode driversystem start **Pb4 VP&  @ 5!b4_#(Microsoft-Windows-Kernel-GeneralOצ]System $3=  \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\flaregamesGmbH.RoyalRevolt2_3.5.0.1_x86__g0q0z3kw54rap\ActivationStore.dat#P**pÐ4 VP&  J M! + Ð4PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Royal Revolt 2гI̠sp**ΐ4 VP&  J a! ΐ4PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? Royal Revolt 2гI̠s|^LEPB**X>64 VP&  @ =!>64PW(3hkW(3(Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\king.com.CandyCrushSodaSaga_1.93.1400.0_x86__kgqvnymyfvs32\ActivationStore.datX**-:4 VP&  J ! -:4PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? >Microsoft Engagement FrameworkEsEG &|^LEPB=**-:4 VP&  J [! + -:4PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  ,Candy Crush Soda Saga@M&sH;ɀn**4-:4 VP&  J o! 4-:4PW(3hkW(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? ,Candy Crush Soda Saga@M&sH;ɀn|^LEPBS-1-**pv2j5 ޑfRޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  !v2j5T# w)CTw)C-Q /J> $ T!BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**P07m5 ޑfR ! `07m5  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `LP**I5 VP&  @ !I5_#\L Microsoft-Windows-Kernel-GeneralOצ]System xLXxLWְ2_͔A%$=NewTime A%$=OldTime A#$=Reason 05+3539}**g`E5 =Y=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@g`E5h w)CT00@yb**F5 =Y M!F5  w)CT((**`2S6 >  !@2S6P0 "e NBackground Intelligent Transfer Servicedemand startauto startBITSings`**%6 > )!@%6P([ PzGE<>x"Google Update Service (gupdate)"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svcuser mode serviceauto startLocalSystem**%6 > 5!@%6P([ PzGE<@~"Google Update Service (gupdatem)"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvcuser mode servicedemand startLocalSystem:\Us**H55?9; VP&  @ /!55?9;&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLXb?9;76H**sŖ:; =Y U!@sŖ:; w)CT00@am**sŖ:; =Y M!sŖ:; w)CT((M**@; > 7!@@;P0[ PzGE<B~"Adobe Flash Player Update ServiceC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeuser mode servicedemand startLocalSystem***BYg= > C!@BYg=P0[ PzGE<6"Mozilla Maintenance Service"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"user mode servicedemand startLocalSystem**P+? ޑfR !+? w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**P;? ޑfR ! `;? w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `lP**Xt0@ >  !@t0@P$ "e 2 Windows Modules Installerdemand startauto startTrustedInstallerabX**P4@ VP&  < 8!%4@&_HMicrosoft-Windows-Time-ServiceSNʦSystem fx-Qnfx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+$= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)P**v@ VP&  @ !v@&_(4Microsoft-Windows-Kernel-GeneralOצ]System $3= U\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dating** fMs@ VP& @ !fMs@&_[Microsoft-Windows-Kernel-GeneralOצ]System $3= e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat** **@ VP&  L g!@@&_ Microsoft-Windows-UserModePowerService 9@wIŐSystem utu tUMNlS8,A$=Turn **Ha@ VP&  < 2!#a@&_H<Microsoft-Windows-Time-ServiceSNʦSystem (svAv(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+$= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)H**HO;@ VP&  @ /!O;@&_Hh Microsoft-Windows-Kernel-GeneralOצ]System xLXP@4@4H**X Z@ >  !@ Z@P "e 2 Windows Modules Installerauto startdemand startTrustedInstaller) X**XH >  !@HP$ "e 2 Windows Modules Installerdemand startauto startTrustedInstaller-KX**XdS*H >  !@dS*HP$ "e 2 Windows Modules Installerauto startdemand startTrustedInstallerabX**@3H | Zȴ~AMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FDESKTOP-2KGM189A  $~m5DUserData!  V !0' 3H&_t Microsoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem -|(-|w^ma%AOޏUMDFDeviceInstallBeginF8version j8http://www.microsoft.com/DriverFrameworks/UserMode/Event$/1DeviceId SWD\WPDBUSENUM\{668C4896-6726-11E7-BCE5-784F439FA657}#00000000000080002.21.0@**둵H |  V !0' 둵H&_t Microsoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem 838RU>+)zAnZaUMDFServiceInstallFܳupgrade  j8http://www.microsoft.com/DriverFrameworks/UserMode/EventAZ2լService8FS%clsid p+name 4MinimumFxVersion   WpdFs-LFcjBf32.21.0**P_H |  V !!0t' _H&_t Microsoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem #C#׋eDVemSDAj"UMDFDeviceInstallEndyj8http://www.microsoft.com/DriverFrameworks/UserMode/Event*%HI FinalStatus P**xD޸H >  !@D޸HP| PzGE<N$WUDFWpdFs\SystemRoot\system32\DRIVERS\WUDFRd.syskernel mode driverdemand startox**H3LH |  2 <!]#N3LH&_t Microsoft-Windows-UserPnpP1~IH 66F #! `@>IH w)CTndo**PIH 66F #! `@PIH w)CTon **0`6H VP&  , )!b`6H&_Microsoft-Windows-Ntfsz?nMĂSystem A~QnA~ R+,;׳A)$= DriveName A+$= DeviceName AA$3=CorruptionActionState 0E:\Device\HarddiskVolume3P0**hsqLH |  2 \!]!NsqLH&_t Microsoft-Windows-UserPnpP1~  !@aRJP "e 2 Windows Modules Installerdemand startauto startTrustedInstaller\CX**X+J >  !@+JP "e 2 Windows Modules Installerauto startdemand startTrustedInstallerLX**H >c VP&  @ /!>c&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLX>cqa`sH**P +7h ޑfR !+7h  w)CTX,Intel(R) 82574L Gigabit Network Connection,0eP**P N:h ޑfR ! `N:hh  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `;P**H  VP&  J ! , {*>PW(3X(3'Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.109.0)6̇B258AppR**(fD VP&  J ! + fDPW(3X(3(Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.109.0)6̇B258$3MN** )3T >  g!@3TPd) PzGE<$MpKsl36ffa3d2C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{44EAA2B6-5725-4D6A-8B83-7EDC2FCB1F10}\MpKsl36ffa3d2.syskernel mode driversystem startndo ***mU VP&  J ! mUPW(3X(3*Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? Definition Update for Windows Defender - KB2267602 (Definition 1.249.109.0)6̇B258CCpe,w **+/mU VP&  J ! , /mUPW(3X(3+Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-06 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4022725)A:8r-KD7**X,MX >  !@MXPd, "e 2 Windows Modules Installerdemand startauto startTrustedInstallerndX**X-'6g >  !@'6gPd- "e 2 Windows Modules Installerauto startdemand startTrustedInstaller@X**X.iJ!ۄ >  !@iJ!ۄPd. "e 2 Windows Modules Installerdemand startauto startTrustedInstallerftX**/[W܄ VP&  J ! + [W܄PW(3X(3/Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-06 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4022725)A:8r-KD7lage**0G VP&  J ! + GPW(3X(340Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNL, **X1v VP&  J 5! (vPW(3X(341Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem h]kh]k8bQ WOb"A)$= errorCode A-$= updateTitle A+$= updateGuid A?$1=updateRevisionNumber A-$= serviceGuid $2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNLCCpe,weX**x2? VP&  J Q! , ?PW(3X(32Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  "Microsoft People֊B۫4+x**h3? VP&  J E! , ?PW(3X(33Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  3D BuilderJ˗PH˨Uerh**4? VP&  J ]! , ?PW(3X(34Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  .Microsoft Sticky NotesgC|aK**X5G VP&  @ ;!G&_h5Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_1.8.0.0_x64__8wekyb3d8bbwe\ActivationStore.datndoX**6n9G VP&  J ]! + n9G&_ 6Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  .Microsoft Sticky NotesgC|a**@7G VP&  @ '!G&_#7Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dato@**H8dG VP&  @ -!dG&_L8Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.dat*H**(9eH VP& @ !eH&_h9[Microsoft-Windows-Kernel-GeneralOצ]System $3= k\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\settings.dat(**:I VP&  J q! IPW(3W(3 :Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ? .Microsoft Sticky NotesgC|a|^LEPBP**@;RJ VP&  @ '!RJPW(3W(3L;Microsoft-Windows-Kernel-GeneralOצ]System $3= \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dat@EPBx!ElfChnk<<p)bEۜ=f?mMFG &** <MJ VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @ S!MJPW(3W(3#<Microsoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vD EventDataAEoData%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datntTZ **H==L VP&  J !! , =LPW(3X(3=Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G  zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber App Installeri$^OX<[H**H>M VP&  @ -!MPW(3X(3L>Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datorH**@?M VP&  @ '!MPW(3X(3h?Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.data@**`@mdN VP&  @ A!mdNPW(3X(3#@Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.10332.0_x64__8wekyb3d8bbwe\ActivationStore.datVP&`**`AVP VP&  @ A!VPPW(3X(3LAMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.10332.0_x64__8wekyb3d8bbwe\ActivationStore.datroso`**HB+|P VP&  @ -!+|PPW(3X(3hBMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.dat AH**@CgP VP&  @ '!gPPW(3X(3#CMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dat@**pDe-P VP&  J K! + e-PPW(3W(3 DMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G App Installeri$^OX<[_)p**(EQ VP& @ !QPW(3W(3#E[Microsoft-Windows-Kernel-GeneralOצ]System $3j\??\C:\Users\tony\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat (**F_نQ VP&  J i! _نQPW(3W(3 FMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC nC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid App Installeri$^OX<[|^LEPBto**@G_teR VP&  @ '!_teRPW(3W(3hGMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dat @**HH%FS VP&  @ -!%FSPW(3W(3LHMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.dat\CH**pIT VP&  J M! , TPW(3X(3IMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Microsoft Tips쎰%K@p**@JU VP&  @ '!UPW(3X(3hJMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dat@**HK V VP&  @ -! VPW(3X(3#KMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datSyH**@L]X VP&  @ '!]XPW(3X(3#LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.1451.0_x64__8wekyb3d8bbwe\ActivationStore.dat@**HMNX VP&  @ -!NXPW(3X(3hMMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datemH**HN"Y VP&  @ /!"YPW(3X(3LNMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_5.10.1441.0_x64__8wekyb3d8bbwe\ActivationStore.datH**xO)^!Y VP&  J Q! + )^!YPW(3W(3 OMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G "Microsoft People֊B۫4+x**P9_Y VP& @ !9_YPW(3W(3hP[Microsoft-Windows-Kernel-GeneralOצ]System $3]\??\C:\Users\tony\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.datws\**QgY VP&  J e! gYPW(3X(3 QMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC "Microsoft People֊B۫4+|^LEPBt**pRgY VP&  J M! + gYPW(3X(3 RMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Microsoft Tips쎰%K@\p**SZ VP& @ !ZPW(3X(3hS[Microsoft-Windows-Kernel-GeneralOצ]System $3a\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat**pTmZ VP&  J I! , mZPW(3 X(3 TMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Feedback HubpBl?#Up**UmZ VP&  J a! mZPW(3 X(3 UMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Microsoft Tips쎰%K@|^LEPB-**HV[ VP&  @ -![PW(3 X(3LVMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datPH**W ] VP&  J ]! , ]PW(3X(3WMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Windows Voice Recorder߮򢟏JQ**HX^ VP&  @ -!^PW(3X(3#XMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\ActivationStore.datbiH**hY!:_ VP&  J E! + !:_PW(3 X(3 YMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G 3D BuilderJ˗PH˨Ue\h**Zo_ VP& @ !o_PW(3 X(3#Z[Microsoft-Windows-Kernel-GeneralOצ]System $3`\??\C:\Users\tony\AppData\Local\Packages\Microsoft.3DBuilder_8wekyb3d8bbwe\Settings\settings.datl-Ge**[5Ʈ` VP&  J Y! 5Ʈ`PW(3tX(3 [Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC 3D BuilderJ˗PH˨Ue|^LEPB**`\Ob VP&  @ C!ObPW(3tX(3L\Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1704.1603.0_x64__8wekyb3d8bbwe\ActivationStore.datJ?@`**h]b VP&  @ I!bPW(3tX(3h]Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1706.1561.0_x64__8wekyb3d8bbwe\ActivationStore.dat.93.h**p^(c VP&  J M! , (cPW(3X(3^Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Windows Camerak@o*Zp**`_he VP&  @ C!hePW(3X(3L_Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1704.1603.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**h`Re VP&  @ I!RePW(3X(3#`Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1706.1561.0_x64__8wekyb3d8bbwe\ActivationStore.datz h**pae VP&  J I! + ePW(3tX(3 aMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Feedback HubpBl?#UC-Qp**(be VP& @ !ePW(3tX(3#b[Microsoft-Windows-Kernel-GeneralOצ]System $3i\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat(**cPf VP&  J ]! PfPW(3X(3 cMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Feedback HubpBl?#U|^LEPBT**df VP&  J ]! + fPW(3X(3 dMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Windows Voice Recorder߮򢟏JQT**(e0Mf VP& @ !0MfPW(3X(3#e[Microsoft-Windows-Kernel-GeneralOצ]System $3k\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat(**f'1g VP&  J m! , '1gPW(3W(3 fMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G >Microsoft Solitaire Collection=,|~Bi**g61g VP&  J q! 61gPW(3W(3 gMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC .Windows Voice Recorder߮򢟏JQ|^LEPB:\P**Xhxh VP&  @ 9!xhPW(3W(3hhMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.308.50.0_x64__8wekyb3d8bbwe\ActivationStore.datxe" X**pi/j VP&  J I! , /jPW(3X(3iMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Windows Maps5FCSv-p**Xjk VP&  @ 9!kPW(3X(3LjMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.308.50.0_x64__8wekyb3d8bbwe\ActivationStore.datX**Xk$m VP&  @ 9!$mPW(3X(3LkMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.308.50.0_x64__8wekyb3d8bbwe\ActivationStore.datX**plZYn VP&  J M! + ZYnPW(3W(3 lMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Windows Camerak@o*tp** mwn VP& @ !wnPW(3W(3Lm[Microsoft-Windows-Kernel-GeneralOצ]System $3d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat w) **n|n VP&  J a! |nPW(3 X(3 nMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Windows Camerak@o*|^LEPB Mo**Poq VP&  @ 5!qPW(3 X(3#oMicrosoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1705.1391.0_x64__8wekyb3d8bbwe\ActivationStore.datoP**pC r VP&  J ]! , C rPW(3X(3pMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Xbox Identity ProviderʨtL!XZs**`qt VP&  @ G!tPW(3X(3LqMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxIdentityProvider_11.29.23003.0_x64__8wekyb3d8bbwe\ActivationStore.datc`**r#*u VP&  J ]! + #*uPW(3 X(3 rMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Xbox Identity ProviderʨtL!XZU**(sypu VP& @ !ypuPW(3 X(3Ls[Microsoft-Windows-Kernel-GeneralOצ]System $3k\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.datC(**tJu VP&  J q! JuPW(3hW(3 tMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC .Xbox Identity ProviderʨtL!XZ|^LEPBoso**PuoNx VP&  @ 5!oNxPW(3hW(3#uMicrosoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1705.1391.0_x64__8wekyb3d8bbwe\ActivationStore.datP**pv.Tx VP&  J I! , .TxPW(3X(3vMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Groove MusicuUzWEl]ydSp**PwT{ VP&  @ 5!T{PW(3X(3LwMicrosoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1705.1391.0_x64__8wekyb3d8bbwe\ActivationStore.dat P**px]OQ| VP&  J I! + ]OQ|PW(3hW(3 xMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Windows Maps5FCSv-crp**y8t| VP& @ !8t|PW(3hW(3Ly[Microsoft-Windows-Kernel-GeneralOצ]System $3b\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat00**zW| VP&  J ]! W|PW(3W(3 zMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Windows Maps5FCSv-|^LEPB**p{s~ VP&  @ S!s~PW(3W(3h{Microsoft-Windows-Kernel-GeneralOצ]System $3*\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.16.6200.0_x64__8wekyb3d8bbwe\ActivationStore.datp**`|T= VP&  J 9! , T=PW(3W(3 |Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G  Xbox7y^2rB/t`**}T= VP&  J m! + T=PW(3W(3 }Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G >Microsoft Solitaire Collection=,|~B **8~ VP& @ !PW(3W(3h~[Microsoft-Windows-Kernel-GeneralOצ]System $3s\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat8**P VP&  J ! PPW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC >Microsoft Solitaire Collection=,|~B|^LEPBPD**ps: VP&  J K! , s:PW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Xbox Game barؗ}Ofp**Pi} VP&  @ 7!i}PW(3X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17054.15411.0_x64__8wekyb3d8bbwe\ActivationStore.dat P**p3 VP&  J I! + 3PW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Groove MusicuUzWEl]yPIp**燄 VP& @ !燄PW(3X(3#[Microsoft-Windows-Kernel-GeneralOצ]System $3`\??\C:\Users\tony\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.datame**X VP&  @ ;!PW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.19.11001.0_x64__8wekyb3d8bbwe\ActivationStore.datifeX**Hd VP&  @ +!dPW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_30.31.1001.0_x64__8wekyb3d8bbwe\ActivationStore.dat H**3K VP&  J ]! 3KPW(3 X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Groove MusicuUzWEl]y|^LEPB**X VP&  @ ;!PW(3 X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.19.11001.0_x64__8wekyb3d8bbwe\ActivationStore.dat MoX**`Wi VP&  J ;! , WiPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G  SkypeV)*M OGe`**pj VP&  J K! + jPW(3 X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Xbox Game barؗ}Ofiop**  VP& @ !PW(3 X(3#[Microsoft-Windows-Kernel-GeneralOצ]System $3f\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat **%$ VP&  J _! %$PW(3 X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Xbox Game barؗ}Of|^LEPB(R) **H  VP&  @ +! PW(3 X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_30.31.1001.0_x64__8wekyb3d8bbwe\ActivationStore.datH**hpn VP&  J ?! , pnPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G OneNoteaݢO/+\Seth**Him VP&  @ +!imPW(3X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_30.31.1001.0_x64__8wekyb3d8bbwe\ActivationStore.datIH**HH VP&  @ +!HPW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\ActivationStore.datH**H  VP&  @ +! PW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_30.31.1001.0_x64__8wekyb3d8bbwe\ActivationStore.datH**`yX VP&  J 9! + yXPW(3 X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G  Xbox7y^2rB/`**tթ VP& @ !tթPW(3 X(3h[Microsoft-Windows-Kernel-GeneralOצ]System $3^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat N**pv( VP&  J M! v(PW(3RX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC  Xbox7y^2rB/|^LEPBp**H^ VP&  @ +!^PW(3RX(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\ActivationStore.dat H**XԘ VP&  @ ?!ԘPW(3RX(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8366.57611.0_x64__8wekyb3d8bbwe\ActivationStore.datX**hli VP&  J A! , liPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Paint 3DmիHA쳴b2h**X6Ҟ VP&  @ ?!6ҞPW(3X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8366.57611.0_x64__8wekyb3d8bbwe\ActivationStore.datX**h  VP&  J ?! + PW(3RX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G OneNoteaݢO/+tem h** Mk VP& @ !MkPW(3RX(3#[Microsoft-Windows-Kernel-GeneralOצ]System $3e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat **xvY VP&  J S! vYPW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC OneNoteaݢO/+|^LEPBx**H< VP&  @ +!<PW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\ActivationStore.dat H**H1 VP&  @ -!1PW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_2.1707.1017.0_x64__8wekyb3d8bbwe\ActivationStore.dat*H**ࡆ VP&  J ]! , ࡆPW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Windows Alarms & Clocke}OOGX**`ࡆ VP&  J ;! + ࡆPW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G  SkypeV)*M O9`**,> VP& @ !,>PW(3X(3h[Microsoft-Windows-Kernel-GeneralOצ]System $3_\??\C:\Users\tony\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.datg**x VP&  J O! PW(3QX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC  SkypeV)*M O|^LEPB SYtx**H) VP&  @ -!)PW(3QX(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_2.1707.1017.0_x64__8wekyb3d8bbwe\ActivationStore.dat*H**HW| VP&  @ -!W|PW(3QX(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_2.1707.1017.0_x64__8wekyb3d8bbwe\ActivationStore.dat1H**xy VP&  J U! , yPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G &Store Purchase App,DCݵ^x**h VP&  J A! + PW(3QX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Paint 3DmիHA쳴b2ph**ꦆ VP& @ !ꦆPW(3QX(3#[Microsoft-Windows-Kernel-GeneralOצ]System $3^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat3**x ZB VP&  J U!  ZBPW(3rW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Paint 3DmիHA쳴b2|^LEPB)x**hߧ VP&  @ I!ߧPW(3rW(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11705.1706.15001.0_x64__8wekyb3d8bbwe\ActivationStore.dat! h**Xs暴 VP&  @ ;!s暴PW(3rW(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.1531.0_x64__8wekyb3d8bbwe\ActivationStore.dats-WX**$ VP&  J [! , $PW(3rW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G ,Paid Wi-Fi & Cellular}ulH"}fx-**x6$ VP&  J U! + 6$PW(3rW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G &Store Purchase App,DCݵ^lx** r^O VP& @ !r^OPW(3rW(3h[Microsoft-Windows-Kernel-GeneralOצ]System $3g\??\C:\Users\tony\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat **k VP&  J i! kPW(3W(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC &Store Purchase App,DCݵ^|^LEPBr W**XZ  VP&  @ ;!Z PW(3W(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.1531.0_x64__8wekyb3d8bbwe\ActivationStore.datX**xaY VP&  J S! , aYPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G $Mail and Calendar7nA|j%iJx**X#g VP&  @ ;!#gPW(3X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.1531.0_x64__8wekyb3d8bbwe\ActivationStore.dat VeX**P} VP&  @ 1!}PW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_2.1704.952.0_x64__8wekyb3d8bbwe\ActivationStore.dat (KBP**Hc֮ VP&  J ]! + Hc֮PW(3W(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G .Windows Alarms & Clocke}OOGX**t VP&  J q! tPW(3qW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC .Windows Alarms & Clocke}OOGX|^LEPB170**l VP&  J [! + lPW(3qW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G ,Paid Wi-Fi & Cellular}ulH"}fx-?@**-̯ VP& @ !-̯PW(3qW(3h[Microsoft-Windows-Kernel-GeneralOצ]System $3a\??\C:\Users\tony\AppData\Local\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings\settings.dat**x( VP&  J Q! , (PW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G "Microsoft Photos=^n6Elx**( VP&  J o! (PW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC ,Paid Wi-Fi & Cellular}ulH"}fx-|^LEPBftSt**p VP&  J G! , PW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G Movies & TVmʿ[QM@%$wsUpp**p׺ VP&  @ U!׺PW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3,\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\ActivationStore.dat45p**x/ VP&  J S! + /PW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G $Mail and Calendar7nA|j%m x**o VP&  J g! oPW(3H"X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC $Mail and Calendar7nA|j%|^LEPB**"t VP&  J m! , "tPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G >March of Empires: War of Lords(:Ȅ@Vagy$e**HĆ VP&  @ -!ĆPW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.6.1.1_x86__h6adky7gbf63m\ActivationStore.datH**MĆ VP&  J m! + MĆPW(3H"X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  G >March of Empires: War of Lords(:Ȅ@Vagy$b\ActivationS VP&  @ ElfChnkEEħV=#{Tf?mMFd&Nt%nkYb `T**(FxĆ VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @ ]!FxĆPW(3H"X(3#Microsoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vD EventDataAEoData%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17062.12911.0_x64__8wekyb3d8bbwe\ActivationStore.dat**(** eĆ VP& @ !eĆPW(3H"X(3L[Microsoft-Windows-Kernel-GeneralOצ]System $3d\??\C:\Users\tony\AppData\Local\Packages\A278AB0D.MarchofEmpires_h6adky7gbf63m\Settings\settings.datalle **vJņ VP&  J ! vJņPW(3pW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o nC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid >March of Empires: War of Lords(:Ȅ@Vagy$|^LEPB**@`ņ VP&  J ! + `ņPW(3pW(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber Movies & TVmʿ[QM@%$@**`ņ VP&  @ E!ņPW(3pW(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\ActivationStore.dat`***ņ VP& @ !*ņPW(3pW(3L[Microsoft-Windows-Kernel-GeneralOצ]System $3`\??\C:\Users\tony\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.datroso**Ɔ VP&  J [! , ƆPW(3QX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  ,Candy Crush Soda Saga+OZ&`s\**Ɔ VP&  J [! ƆPW(3QX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o Movies & TVmʿ[QM@%$|^LEPB**`|&.ʆ VP&  J ;! , |&.ʆPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   StorejX9O:iv`**`ʆ VP&  @ E!ʆPW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**x &ˆ VP&  J Q! + &ˆPW(3QX(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  "Microsoft Photos=^n6El_نQx**ˆ VP&  J e! ˆPW(3B%X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o "Microsoft Photos=^n6El|^LEPBu**xCW φ VP&  J U! , CW φPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  &Windows Calculator_^K$mtx**X6EІ VP&  @ ;!6EІPW(3X(3hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\ActivationStore.datX**`І VP&  J ;! + ІPW(3B%X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   StorejX9O:ek`**xgiц VP&  J O! giцPW(3X(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o  StorejX9O:|^LEPBx**` x|Ԇ VP&  @ C! x|ԆPW(3X(3LMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1706.1862.0_x64__8wekyb3d8bbwe\ActivationStore.dattio`**p=9Ԇ VP&  J G! , =9ԆPW(3X(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  MSN Weather  T!BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**Pю ޑVR ! `юT w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**b"+ VP&  @ !b"+&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3X,\SystemRoot\System32\Config\RegBack\SECURITYgVP&**o+, VP&  @ !o+,&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3X,\SystemRoot\System32\Config\RegBack\SOFTWAREx6**yeT, VP&  @ }!yeT,&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3T*\SystemRoot\System32\Config\RegBack\SYSTEM:"ky** =Z, VP&  @ ! =Z,&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3V+\SystemRoot\System32\Config\RegBack\DEFAULT-&S**kZ, VP&  @ w!kZ,&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3N'\SystemRoot\System32\Config\RegBack\SAMLV**P- VP&  < 8!%-&_HMicrosoft-Windows-Time-ServiceSNʦSystem fx- `fx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)8wP**H^46 VP&  < 2!#^46&_HxMicrosoft-Windows-Time-ServiceSNʦSystem (svYb(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)H**46 VP&  @ !46&_HMicrosoft-Windows-Kernel-GeneralOצ]System xLdxLWְ2_͔A%=NewTime A%=OldTime A#=Reason 46e46P&**P ޑVR ! w)CTX,Intel(R) 82574L Gigabit Network Connection,0dP**P ޑVR ! `X w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H VP&  @ /!&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLd@: $ H**Hmӣ VP&  @ /!mӣ&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLd0ᣪD_aH**h湜 VP& < ]!@*湜&_TMicrosoft-Windows-Kernel-Power:;3 D^w" 7ִSystem fkVRfwݼY\cԞ A-= TargetState A3%=EffectiveState A#=Reason A!=Flags A5'=TransitionsToOn h**@h VP& < 3!fkDh&_TMicrosoft-Windows-Kernel-Power:;3 D^w" 7ִSystem 50K%n50KC\ eHhqA-= TargetState A3%=EffectiveState A1#= WakeFromState A?1=ProgrammedWakeTimeAc A?1=ProgrammedWakeTimeDc A=/=WakeRequesterTypeAc A=/=WakeRequesterTypeDc 6w6wXbo@**@ˀ  VP& @ /!ˀ &_TMicrosoft-Windows-Kernel-GeneralOצ]System xLd hO@**Pz  ޑVR ! `z  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `dP**%" VP&  L !%"D)EB@?HMicrosoft-Windows-Power-Troubleshooter(^II҈vDSystem Z[Uto Z[ULž[lms}6A)= SleepTime A'=WakeTime A1#= SleepDuration A/!= WakeDuration A;-=DriverInitDuration A7)=BiosInitDuration A;-=HiberWriteDuration A9+=HiberReadDuration A9+=HiberPagesWritten A+= Attributes A-= TargetState A3%=EffectiveState A3%=WakeSourceType A?1=WakeSourceTextLength A3%=WakeSourceText A?1=WakeTimerOwnerLength AC5=WakeTimerContextLength AG9=NoMultiStageResumeReason A3%=WakeTimerOwner A7)=WakeTimerContext bb{"W XLcros**8 Ӆ, MPyMP!Zpwk&AMsj5http://schemas.microsoft.com/win/2004/08/events/event3AF= Microsoft-Windows-DistributedCOMFX&{1B562E86-B7AA-4131-BADC-B6F3A001407E}#{`EventSourceNameDCOMAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  ! ' Ӆ,4 2U<}2UUWE-ڟA#=param1 A#=param2 A#=param3 A#=param4 A#=param5 A#=param6 A#=param7 A#=param8 A#=param9 A%=param10 A%=param11  ( LL ,application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable8**`2 ==\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! M!`2 w)CT((**ʭ2 = U!@ʭ2 w)CT00@\**2 = M!2T w)CT((d8***D9 VP&  8 !@*D9&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  y @\oA)= QueryName A1#= AddressLength A%=Address "go.microsoft.com p**gVP >6>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}#{Service Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  c!@gVPPx "e"eReRLuA#=param1 A#=param2 A#=param3 A#=param4 6 Remote Access IP ARP Driverdemand startauto startwanarpJ**PρQ ޑVR !ρQ w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**P|T ޑVR ! `|T w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `rP**PH=;ӧ ޑVR !H=;ӧ# w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**P a֧ ޑVR ! ` a֧  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H,ƨ VP&  @ /!,ƨ&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLd,ƨս_H**Prب ޑVR !rب  w)CTX,Intel(R) 82574L Gigabit Network Connection,0aP**Pۨ ޑVR ! `ۨ  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `tP**Hz+ VP&  @ /!z+\L Microsoft-Windows-Kernel-GeneralOצ]System xLd+\H**PCPѫ ޑVR !CPѫ# w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**Pԫ ޑVR ! `ԫ  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H ICɸ VP&  @ /!ICɸ\L Microsoft-Windows-Kernel-GeneralOצ]System xLd`aɸثtH**P Ӭ ޑVR !Ӭ#  w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**P \]ج ޑVR ! `\]ج#  w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H : VP&  @ /!:\L Microsoft-Windows-Kernel-GeneralOצ]System xLd*:7ܬH**P I;L ޑVR !I;L  w)CTX,Intel(R) 82574L Gigabit Network Connection,0yP**P_UO ޑVR ! `_UO w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` ` P** Kݯ VP&  L s! @ Kݯ&_ Microsoft-Windows-UserModePowerService 9@wIŐSystem n@On@O@KX7✏~A-= ProcessPath A+= ProcessPid A1#= OldSchemeGuid A1#= NewSchemeGuid 0C:\Windows\explorer.exe"B8A[`."B8A[`.g**B3߯ VP&  L s! @B3߯&_ Microsoft-Windows-UserModePowerService 9@wIŐSystem n@O0C:\Windows\explorer.exe"B8A[`.A5OV Je**# VP&  L s! @#&_ Microsoft-Windows-UserModePowerService 9@wIŐSystem n@O0C:\Windows\explorer.exeA5OV JA5OV J**Pg ޑVR !g8 w)CTX,Intel(R) 82574L Gigabit Network Connection,0P**P ޑVR ! `t w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `\P**HeB VP&  @ /!eB&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLdpTB4⭲H**HJvS VP&  @ /!JvS&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLd@vS&óoH**P ޑVR ! w)CTX,Intel(R) 82574L Gigabit Network Connection,0WP**P. ޑVR ! `. w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**P  ޑVR !  w)CTX,Intel(R) 82574L Gigabit Network Connection,0NP**H50 VP&  @ /!50&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLdP0>H**P}2 ޑVR ! `}2 w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H뚱 VP&  @ /!뚱\L Microsoft-Windows-Kernel-GeneralOצ]System xLdpAQTH**Puʣ ޑVR !uʣ_G H**!KSX = U!@KSX$! w)CT00@**"KSX = M!KSXh" w)CT((ra**# .zX VP&  J ! , .zXPW(3^X(3#Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.139.0)}rK (3**$8HzX VP&  J ! + 8HzXPW(3^X(3$Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.139.0)}rK **%[X VP&  J ! [X&_%Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o Definition Update for Windows Defender - KB2267602 (Definition 1.249.139.0)}rK CCpe,wso**&Tr[X VP&  J ! + Tr[X&_&Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNL\App**X'iX VP&  J 5! (iX&_'Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem h]kh]k8bQ WOb"A)= errorCode A-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid $2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNLCCpe,wCX**H(ÂX >6  !@ÂXP( PzGPzGe\UA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName $MpKsl3bc279efC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B09DC6E6-D3CD-4A36-9E2E-B0F7023A69AD}\MpKsl3bc279ef.syskernel mode driversystem starttH**P)fjY ޑVR !fjYL) w)CTX,Intel(R) 82574L Gigabit Network Connection,0PP**P*dmY ޑVR ! `dmYL* w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `mP**+,Z VP&  < !%,Z&_H+Microsoft-Windows-Time-ServiceSNʦSystem fx- `~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)s\**,iS[ VP&  < !#iS[HP,Microsoft-Windows-Time-ServiceSNʦSystem (svYb~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)te**H-S[ VP&  @ /!S[&_Hl -Microsoft-Windows-Kernel-GeneralOצ]System xLd,S[S[oH**P.1\ ޑVR !1\. w)CTX,Intel(R) 82574L Gigabit Network Connection,0wP**P/E\ ޑVR ! `E\$/ w)CTX,Intel(R) 82574L Gigabit Network Connection,0 ` `OP**h0B  N !}B0 w)CTPF27765560480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189GJ?@h**H1kB VP&  @ /!kB?%0;O(ex8\L 1Microsoft-Windows-Kernel-GeneralOצ]System xLd B]oH**2 \C = U!@ \C2 w)CT00@**3E\C = M!E\C 3 w)CT((Us**44 VP&  < !%4&_H4Microsoft-Windows-Time-ServiceSNʦSystem fx- `~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)-W**5G VP&  < !#G&_H 5Microsoft-Windows-Time-ServiceSNʦSystem (svYb~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)ra**H6?Ԭ VP&  @ /!?Ԭ&_H 6Microsoft-Windows-Kernel-GeneralOצ]System xLd`qeH**H7ݢ% VP&  @ /!ݢ%&_\L 7Microsoft-Windows-Kernel-GeneralOצ]System xLdޢ%c$H**8v6% = U!@v6%8 w)CT00@**96% = M!6%9 w)CT((\M**:$% VP&  J ! , $%PW(31fX(3#:Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.191.0)SB@s߶D!:\Pr**;jI% VP&  J ! + jI%PW(31fX(3d;Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.191.0)SB@s߶D!indo**<& VP&  J ! &PW(31fX(3d<Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o Definition Update for Windows Defender - KB2267602 (Definition 1.249.191.0)SB@s߶D!CCpe,woc** =& >6  g!@&P= PzG$MpKslcdc646f9C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{937023C4-0C16-46D6-A616-1ACB2BC1B3E0}\MpKslcdc646f9.syskernel mode driversystem start **@>HrVX* 6JR'PYAMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Microsoft-Windows-HttpEventFX&{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}#{HTTPAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  ! !:@HrVX* >  bH bHG^ճg6l`A/!= DeviceObject A=Url Lhttp://127.0.0.1:47873:127.0.0.1/help/@**p?4 VP&  J M! , 4PW(3RX(3H!?Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Microsoft TipsrY0.@9)Zep**`@4 VP&  J ;! , 4PW(3RX(3H!@Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   Store ]NsM1Vne`**xA4 VP&  J U! , 4PW(3RX(3H!AMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  &Store Purchase App D#Rdbax**`Bg4 VP&  @ G!g4&_ BMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11706.1707.7010.0_x64__8wekyb3d8bbwe\ActivationStore.dato`**HCu4 VP&  @ /!u4&_ CMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_5.11.1641.0_x64__8wekyb3d8bbwe\ActivationStore.dateH**xDB4 VP&  J U! + B4&_DMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  &Store Purchase App D#Rdbdx**Ex4 VP&  J i! x4PW(3WX(3EMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC o &Store Purchase App D#Rdb|^LEPBMicsoft-Windows VP&  @  d4PW(3WX(3 FMicrosoft-Windows-Kernel-GeneralOצ]System $3@ ElfChnkFFX}Po]=zf?mMF}& ~'&.4INDfyA|** F d4 VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @ U! d4PW(3WX(3 FMicrosoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vD EventDataAEoData%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_5.11.1641.0_x64__8wekyb3d8bbwe\ActivationStore.dat **XGD4 VP&  @ ;!D4PW(3WX(3 GMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\ActivationStore.datX**HH 4 VP&  J #! +  4PW(3WX(3HMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber Microsoft TipsrY0.@9)ZofH**Ix4 VP&  J k! x4PW(3aRX(3IMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC nC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid Microsoft TipsrY0.@9)Z|^LEPBŐ**`JO4 VP&  J ;! + O4PW(3aRX(3JMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   Store ]NsM1Vnd`**xK70~4 VP&  J O! 70~4PW(3)X(3KMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC  Store ]NsM1V|^LEPBņPx**pL-% 7 ޑNޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  !-% 7 L w)Cw)C-Q /J>  !BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**PM]#7 ޑN ! `]#7M w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**N+ 7 VP&  8 !@+ 7&_ NMicrosoft-Windows-DNS-Clientn~Ix=MSystem   @\oA)= QueryName A1#= AddressLength A%=Address >_ldap._tcp.dc._msdcs.WORKGROUPppR**PO?:9 ޑN !?:9O w)CX,Intel(R) 82574L Gigabit Network Connection,0 P**PP6|^9 ޑN ! `6|^9P w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**PQJ}9 ޑN !J}9Q w)CX,Intel(R) 82574L Gigabit Network Connection,0P**PR9 ޑN ! `9R w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `^P**S?_ldap._tcp.dc._msdcs.WORKGROUPs\**Z&aL VP&  8 !@&aL&_ ZMicrosoft-Windows-DNS-Clientn~Ix=MSystem  @settings-win.data.microsoft.como**H[_nZ VP&  @ /!_nZ&_\L [Microsoft-Windows-Kernel-GeneralOצ]System xL}&гnZ 1pU H**H\zZ VP&  @ /!zZ&_\L \Microsoft-Windows-Kernel-GeneralOצ]System xL}&`ZwZH**H]va VP&  @ /!va\L ]Microsoft-Windows-Kernel-GeneralOצ]System xL}&`aP)ZH**H^^b VP&  @ /!^b\L ^Microsoft-Windows-Kernel-GeneralOצ]System xL}&`^b~a\H** _h  .4 #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}h_ w)CPF29898360480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189s\ **P`JBb ޑN !JBb ` w)CX,Intel(R) 82574L Gigabit Network Connection,0WP**Ha{h VP&  @ /!{h&_\L aMicrosoft-Windows-Kernel-GeneralOצ]System xL}&Fh/bkH**Pb^h ޑN ! `^h#b w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `ZP**cV(j =~' U!@V(jc w)C00@6**dv(j =~' M!v(jhd w)C((X**eem VP&  8 !@em&_ (eMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPtt**Pfۉ VP&  < 8!%ۉ&_H(fMicrosoft-Windows-Time-ServiceSNʦSystem fx-Afx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)P**Hg8W VP&  @ /!8W&_HDgMicrosoft-Windows-Kernel-GeneralOצ]System xL}&,֋H**Hh| VP&  < 2!#|&_H\hMicrosoft-Windows-Time-ServiceSNʦSystem (svD(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)JH**HiO VP&  @ /!O&_HDiMicrosoft-Windows-Kernel-GeneralOצ]System xL}&P3hH**Hjm VP&  @ /!m&_HDjMicrosoft-Windows-Kernel-GeneralOצ]System xL}& cH**Hk e VP&  @ /! e&_\L kMicrosoft-Windows-Kernel-GeneralOצ]System xL}&e}H**Xl7b c}Ic} WҞiAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA=DiskAz    fA   System(FDESKTOP-2KGM189A  ! !37b l w)C,\Device\Harddisk0\DR03-.|)X0  @Ae*4%ڜX**m7b c}I !37b m w)C,\Device\Harddisk0\DR03-.|)X0  @AHuI*4-**Hn53k  VP&  @ /!53k &_\L nMicrosoft-Windows-Kernel-GeneralOצ]System xL}&/k k;JcH**Ho$ VP&  @ /!$&_\L oMicrosoft-Windows-Kernel-GeneralOצ]System xL}&$j0/H**Hp̎ VP&  @ /!̎&_\L pMicrosoft-Windows-Kernel-GeneralOצ]System xL}&@莟OHH**pqPĬ VP&  J I! , PĬPW(3XX(30 qMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Groove MusicuaC:PKGp**Pr VP&  @ 7!&_"!rMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\ActivationStore.datP**ps| VP&  J I! + |&_"sMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Groove MusicuaC:PMicp**t d VP&  J ]!  dPW(3X(3"tMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Groove MusicuaC:P|^LEPB** ucif VP& @ !cif0u[Microsoft-Windows-Kernel-GeneralOצ]System $3g\??\C:\Users\tony\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat **Pvr7 ޑN !r7v w)CX,Intel(R) 82574L Gigabit Network Connection,0oP**Pw[U ޑN ! `[Uw w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Pxt ޑN !tx w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Py  ޑN ! ` `y w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Pz"  ޑN !" z w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P{C  ޑN ! `C { w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**P|_ ޑN !_l| w)CX,Intel(R) 82574L Gigabit Network Connection,0aP**P}+p ޑN ! `+pl} w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**~`! VP&  8 !@`!&_ ~Microsoft-Windows-DNS-Clientn~Ix=MSystem  .client.wns.windows.com57**Hw^ VP&  @ /!w^&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL}& u^PFloH**Hq VP&  @ /!q&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&`qoH**P^?V ޑN !^?V0  w)CX,Intel(R) 82574L Gigabit Network Connection,0-P**Pb[Y ޑN ! `b[Y0  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**^^^ VP&  8 !@^^^ Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP=**PBga ޑN !Bga w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Pgzd ޑN ! `gzd w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Ph VP&  8 !@Ph_# Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP***\- VP&  J ! , *\-Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.252.0)Wp| NO{YA7**A\- VP&  J ! + A\-Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.252.0)Wp| NO{YWa**2 VP&  J ! 2&_Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Definition Update for Windows Defender - KB2267602 (Definition 1.249.252.0)Wp| NO{YCCpe,w**8zh6 >fy>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}z`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@zh6P$ PzG|PzGe\UA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName $MpKsl48cef57cC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D4082E20-9FFC-4285-8C14-21E802F393CB}\MpKsl48cef57c.syskernel mode driversystem startic8**P  ޑN !   w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Pa<  ޑN ! `a<  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**PV  ޑN !V  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P  ޑN ! `  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Q  VP&  8 !@Q &_ HMicrosoft-Windows-DNS-Clientn~Ix=MSystem  0safebrowsing.google.com**PݰX  ޑN !ݰX D w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P[  ޑN ! `[  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**_  VP&  8 !@_ &_ pMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**PS+W ޑN !S+WD w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P9+9Z ޑN ! `9+9Z  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `lP**Px) ޑN !x)P w)CX,Intel(R) 82574L Gigabit Network Connection,0lP**Hth , VP&  @ /!th ,&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&pQh ,')IH**P> , ޑN ! `> ,P w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `IP**H,7 VP&  @ /!,7&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&@7\.cH**P]7 ޑN !]7 w)CX,Intel(R) 82574L Gigabit Network Connection,0IP**POv|7 ޑN ! `Ov|7P w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `IP** 7 VP&  8 !@ 7&_ dMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**Pr@7 ޑN !r@7# w)CX,Intel(R) 82574L Gigabit Network Connection,0P**PƄD7 ޑN ! `ƄD7 w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**ҕH7 VP&  8 !@ҕH7_#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPI**HXó? VP&  @ /!Xó?_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}& ?ó?)Y7H**P,? ޑN !,?P w)CX,Intel(R) 82574L Gigabit Network Connection,0cP**P? ޑN ! `?# w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `IP**+? VP&  8 !@+? Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPK**hs5H  .4 !}s5H w)CPF32955460480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189Ah**H.5H VP&  @ /!.5H\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&5Hˆ?H**PSwMH ޑN !SwMHP w)CX,Intel(R) 82574L Gigabit Network Connection,0MP**PCPH ޑN ! `CPH w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**\nUH VP&  8 !@\nUH  Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H.P VP&  @ /!.P\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&@.PYHH**PשP ޑN !שP# w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P.P ޑN ! `.P w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**HP9Y VP&  @ /!P9Y_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&P9YvPH**xw;Y VP&  8 !@xw;Y Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**PqxVY ޑN !qxVY w)CX,Intel(R) 82574L Gigabit Network Connection,0P**PZY ޑN ! `ZYP w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Hv?{Y VP&  @ /!v?{Y_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&x{Y7]YH**ދS}Y VP&  8 !@ދS}Y_# Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**PtY ޑN !tY w)CX,Intel(R) 82574L Gigabit Network Connection,0pP**P/RٲY ޑN ! `/RٲY w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H5"b VP&  @ /!5"b_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&p"bT(YH**Ppߪ8b ޑN !pߪ8b w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Pj;b ޑN ! `j;b`  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**@b VP&  8 !@@b Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H5j VP&  @ /!5j\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&5jТ`FbH**PV j ޑN !V j w)CX,Intel(R) 82574L Gigabit Network Connection,0tP**P,j ޑN ! `,j" w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `@P**HD%s VP&  @ /!D%s_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&@%sQjH**幦&s VP&  8 !@幦&s_# @Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H֡ڧ{ VP&  @ /!֡ڧ{\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&@ѧ{ŁIs7H**P{ ޑN !{ w)CX,Intel(R) 82574L Gigabit Network Connection,0oP**Psf{ ޑN ! `sf{`  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**{ VP&  8 !@{ @Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPU**P\T{ ޑN !\T{# w)CX,Intel(R) 82574L Gigabit Network Connection,0PP**P9J{ ޑN ! `9J{ w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `RP**HJ]M VP&  @ /!J]M_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&]MtR{H**PA8N ޑN !A8N w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P\YQ ޑN ! `\YQ  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `.P**U VP&  8 !@U 8 Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**PłZ ޑN !łZ" w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P^ ޑN ! `^P w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**j7b VP&  8 !@j7b_# DMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**HΌ VP&  @ /!Ό_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&0:Ό<9#qbH**P_ ޑN !_P w)CX,Intel(R) 82574L Gigabit Network Connection,0eP**P) ޑN ! `) w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P** VP&  8 !@ DMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPe-**HCP VP&  @ /!CP\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&CP C~H**Pygj ޑN !ygj  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**PJxm ޑN ! `Jxm w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**!xr VP&  8 !@!xr_# 8 Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H\ѝ VP&  @ /!\ѝ_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}& ?ҝ_ldap._tcp.dc._msdcs.WORKGROUP>6**PRy ޑN !RyP w)CX,Intel(R) 82574L Gigabit Network Connection,02P**P| ޑN ! `|  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**HcΦ VP&  @ /!cΦ_#\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&pbΦ~:@ H**P]"E VP&  < !%P]"E&_H`Microsoft-Windows-Time-ServiceSNʦSystem fx-Atime.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.166.120.77:123)**M VP&  < !#M&_HMicrosoft-Windows-Time-ServiceSNʦSystem (svDtime.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.166.120.77:123)e**H:M VP&  @ /!:M&_H Microsoft-Windows-Kernel-GeneralOצ]System xL}&˼M5MoH**PVJZ ޑN !VJZH w)CX,Intel(R) 82574L Gigabit Network Connection,0oP**P3}Ĭ ޑN ! `3}ĬH w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` ` P**tȬ VP&  8 !@tȬ&_ dMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**Hx{ VP&  @ /!x{&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL}&{IЬdH**@n VP& @ !n&_ [Microsoft-Windows-Kernel-GeneralOצ]System $3u\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat#Rd@**PM[ ޑN !M[h w)CX,Intel(R) 82574L Gigabit Network Connection,0eP**PDz ޑN ! `Dz  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `Pystem $3@ ElfChnknnx9m~h"nomod{dnyc_-i 6ofXdgo?^i`i^_WnnFu&+fN$m_Wh@ ***A VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @  !A&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLxLWְ2_D EventDataA7oData=NewTime A%=OldTime A#=Reason Ad&**pŹG8 ޑޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  !ŹG8X  w)C@ w)C-Q /J>  !BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**H*P VP&  @ /!*P_#\L Microsoft-Windows-Kernel-GeneralOצ]System xLyPQ 9@H**P)"S ޑ ! `)"S w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**.W VP&  8 !@.W&_ x#Microsoft-Windows-DNS-Clientn~Ix=MSystem   @\oA)= QueryName A1#= AddressLength A%=Address >_ldap._tcp.dc._msdcs.WORKGROUP**0Y X VP& @ !Y X [Microsoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat5ft.0**P> ޑ !>X  w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P]L ޑ ! `]L  w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**ŵ VP&  @ c!ŵ&_Microsoft-Windows-Kernel-GeneralOצ]System iC^uiC^sZ'>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}a(`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@P$ PzG*PzGe\UA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName $MpKsl9b125884C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A9D3B8A6-B3FA-44DB-9689-803E2880E53D}\MpKsl9b125884.syskernel mode driversystem start8**P1eW ޑ !1eWx w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PxZ ޑ ! `xZ, w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `KP**P}^ ޑ !}^x w)C@ X,Intel(R) 82574L Gigabit Network Connection,0eP**PQa ޑ ! `QaX  w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**e VP&  8 !@e&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPM** { VP& @ !{&_ [Microsoft-Windows-Kernel-GeneralOצ]System $3e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat C ** î VP& @ !î&_T[Microsoft-Windows-Kernel-GeneralOצ]System $3f\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat( **Hkp VP&  @ /!kp&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLogMRH**PՑ ޑ !Ցx w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P- ޑ ! `-" w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**ri VP&  8 !@ri&_ lMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP8** VP&  8 !@&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpad**_ VP&  8 !@_&_ dMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad9 (**PF\ ޑ !F\8 w)C@ X,Intel(R) 82574L Gigabit Network Connection,0aP**P'X ޑ ! `'X w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**q VP&  8 !@q.U8A{I4Yb Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPi**PE ޑ !E|" w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P ޑ ! ` w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Po+, ޑ !o+, w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PB/ ޑ ! `B/ w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**&E{3 VP&  8 !@&E{3&_ hMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**P R ޑ ! R# w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P3U ޑ ! `3U|" w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P** 6Y VP&  8 !@6Y&_  Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadindo**H 6 x> VP&  @ /!6 x>&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLx>koH** 4,Ώ VP&  8 !@4,Ώ&_  Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpad** Wf_ VP&  8 !@Wf_&_  Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpad** Ad 66V66T+;V`dSAMsj5http://schemas.microsoft.com/win/2004/08/events/event+AF=#Microsoft-Windows-WPDClassInstallerFX&{AD5162D8-DAF0-4A25-88A7-01CBEB33902E}a(WPDClassInstallerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  ! 9!`@Ad  w)C@ WPD Device** 66V #! `@ w)C@ v**ժ 66V #! `@ժ w)C@ 257**1 V\ Zȴ~AMsj5http://schemas.microsoft.com/win/2004/08/events/eventbAF=XAz      ? fA   AFFm AF  (FDESKTOP-2KGM189A  $i^m5DUserData!  V R!0' 1&_xMicrosoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem -|_-|w^ma%A_ޏUMDFDeviceInstallBeginF_8version j8http://www.microsoft.com/DriverFrameworks/UserMode/Event$`1DeviceId SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_GENERIC-&PROD_USB3.0_CRW___-SD&REV_1.00#201412031053&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}2.21.0***9 V\  V !0' 9&_xMicrosoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem 8c'8RU>+)zAnBca(aUMDFServiceInstallFycܳupgrade  j8http://www.microsoft.com/DriverFrameworks/UserMode/EventAZdլService8F;d%clsid Xd+name 4{dMinimumFxVersion   WpdFs-LFcjBf32.21.0**P  V\  V !!0t' &_xMicrosoft-Windows-DriverFrameworks-UserMode5.K.lTوSystem #+f#׋eDVemSDARf"UMDFDeviceInstallEndyj8http://www.microsoft.com/DriverFrameworks/UserMode/Event* gHI FinalStatus P**Q V\  2 !]#NQ&_xMicrosoft-Windows-UserPnpP1~mjInstallDeviceID}j:http://manifests.microsoft.com/win/2004/08/windows/userpnp(miM DriverName ."nRf DriverVersion 0Wn9DriverProvider  i (n[ SetupClass ,nM RebootOption  .o UpgradeDevice  *6o;dk IsDriverOEM  .go- InstallStatus 6oMDriverDescription  V   :wpdfs.inf_amd64_e898714e5623f0fe\wpdfs.inf10.0.15063.0MicrosoftSWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_GENERIC-&PROD_USB3.0_CRW___-SD&REV_1.00#201412031053&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}_B*ڿ=WPD FileSystem Volume Driver!**_ VP&  8 !@_&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpad**P:. ޑ !:.  w)C@ X,Intel(R) 82574L Gigabit Network Connection,07P**PXR ޑ ! `XR# w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**ϵ VP&  8 !@ϵR ,Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadroso**C VP&  8 !@C&_ ,Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadros**2V VP&  8 !@2V ,Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadA**P) ޑ !)L  w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**H65 VP&  @ /!65&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLp5|d-H**P /36 ޑ ! ` /36! w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P** I%  ږV #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}I% w)C@ PF35439860480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189ޑN **<`37 ==\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@<`37  w)C@ 00@** <`37 = M!<`37!  w)C@ ((**P!~r7 ޑ !~r7! w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**H"% VP&  @ /!%_#\L "Microsoft-Windows-Kernel-GeneralOצ]System xL0%߿7H**P#85% ޑ ! `85%H# w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H$j% }N}1e^#֝AMsj5http://schemas.microsoft.com/win/2004/08/events/event A=cdromAz    fA   System(FDESKTOP-2KGM189A  ! !3j%H$ w)C@ \Device\CdRom03-hdZX H@ Pۉ@܉(L (H**%j? ' = U!@j? '% w)C@ 00@**&j? ' = M!j? 'P& w)C@ ((***'T+ VP&  8 !@T+&_ 'Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**('u/ VP& @ !'u/$([Microsoft-Windows-Kernel-GeneralOצ]System $3c\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat**)J; : VP&  J m! , J; :PW(3yY(3)Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >Microsoft Engagement Framework3QDN/XL**h*G; VP&  @ M!G;PW(3yY(3X*Microsoft-Windows-Kernel-GeneralOצ]System $3$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\ActivationStore.dat57h**h+; VP&  @ M!;PW(3yY(3X+Microsoft-Windows-Kernel-GeneralOצ]System $3$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\ActivationStore.dath**,f VP&  J ! , fPW(3yY(3,Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.418.0)z>F.H L **-f VP&  J ! + fPW(3yY(3-Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.249.418.0)z>F.H c**.1ߕ VP&  J ! 1ߕ&_.Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Definition Update for Windows Defender - KB2267602 (Definition 1.249.418.0)z>F.H CCpe,w** /{ژ >'  g!@{ژPx/ PzG*$MpKslecf28946C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{663D6C32-5984-40FA-9C9F-10957C733253}\MpKslecf28946.syskernel mode driversystem start60 **P01  VP&  < 8!%1 &_H#0Microsoft-Windows-Time-ServiceSNʦSystem fx-fx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)soP**H1 VP&  @ /!&_H01Microsoft-Windows-Kernel-GeneralOצ]System xLĜɩsIH**H2 VP&  < 2!#&_H(2Microsoft-Windows-Time-ServiceSNʦSystem (sv(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123) H**H3[ VP&  @ /![&_H03Microsoft-Windows-Kernel-GeneralOצ]System xLKEH**H4I) VP&  @ /!I)&_H04Microsoft-Windows-Kernel-GeneralOצ]System xLB?usH**5E VP& @ {!E&_ 5[Microsoft-Windows-Kernel-GeneralOצ]System $3R)\??\C:\Windows\System32\config\components  **P6X=  ޑ !X= H6 w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**H73H  VP&  @ /!3H &_\L 7Microsoft-Windows-Kernel-GeneralOצ]System xLɛ \= H**P8Hv  ޑ ! `Hv 8 w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**9Q  = U!@Q _ldap._tcp.dc._msdcs.WORKGROUPso**P<   ޑ !  < w)C@ X,Intel(R) 82574L Gigabit Network Connection,0WP**P=#  ޑ ! `# "= w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**P>#8j  ޑ !#8j  w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P?T  ޑ ! `T  ? w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**@  VP&  8 !@ _# @Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP) **HA08c  VP&  @ /!08c _#\L AMicrosoft-Windows-Kernel-GeneralOצ]System xLHc  lH**PBi  ޑ !i (B w)C@ X,Intel(R) 82574L Gigabit Network Connection,0WP**PCSe  ޑ ! `Se (C w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Di  VP&  8 !@i  DMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP) **HE  VP&  @ /! \L EMicrosoft-Windows-Kernel-GeneralOצ]System xL ^' lH**Fy&  VP&  8 !@y& &_ FMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpadQj**Gp  VP&  8 !@p &_ "GMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad**PHG  ޑ !G H w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 P**PIϪJ  ޑ ! `ϪJ I w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**J)O  VP&  8 !@)O _# JMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad**K d  VP&  8 !@ d &_ KMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad**PL  ޑ !  L w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PM  ޑ ! `  M w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Nv  VP&  8 !@v &_ NMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad**PO  ޑ !  O w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PPq"  ޑ ! `q" P w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Q&  VP&  8 !@& _# QMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**HRՙ5  VP&  @ /!ՙ5 &_\L RMicrosoft-Windows-Kernel-GeneralOצ]System xL@5 ^#. H**HS&!  VP&  @ /!&! &_\L SMicrosoft-Windows-Kernel-GeneralOצ]System xL@J&! $6$! H**TՑ!  VP&  8 !@Ց! &_ TMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad**PUΧ%  ޑ !Χ% U w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PVS%  ޑ ! `S% V w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**WL?%  VP&  8 !@L?% &_ WMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpadMic**HXAa(  VP&  @ /!Aa( &_\L XMicrosoft-Windows-Kernel-GeneralOצ]System xLa( ,% PH**PYl(  ޑ !l( Y w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**PZ3o(  ޑ ! `3o( Z w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**[-s(  VP&  8 !@-s(  ![Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadr**H\2(  VP&  @ /!2( \L \Microsoft-Windows-Kernel-GeneralOצ]System xLꞱ( zB#( H**P]D8(  ޑ !D8( ] w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**P^j(  ޑ ! `j( ^ w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**_ě(  VP&  8 !@ě( _# <_Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpad **H`\)  VP&  @ /!\) _#\L `Microsoft-Windows-Kernel-GeneralOצ]System xL\) u( H**Pa!ao,  ޑ !!ao, x a w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**Pbnvr,  ޑ ! `nvr,  b w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**ctְv,  VP&  8 !@tְv, &_ cMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP **dw/  VP&  8 !@w/ &_ dMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpadindo**Pe)Gc/  ޑ !)Gc/ e w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**Pf[/  ޑ ! `[/ f w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Pgn/  ޑ !n/ g w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**hw /  VP&  8 !@w / _#  #hMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPel**Pi./  ޑ ! `./ 8i w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `WP**(j0  >' _!@0 P(j[ PzG*"Pathfinder"C:\Users\tony\AppData\Local\Temp\pytest-of-tony\pytest-0\test_agent_update_op0\pathfinder\pathfinder.exe"user mode servicedemand startLocalSystem(**Pk-9  ޑ !-9 k w)C@ X,Intel(R) 82574L Gigabit Network Connection,0OP**Plo#9  ޑ ! `o#9 l w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Pm谺T9  ޑ !谺T9 m w)C@ X,Intel(R) 82574L Gigabit Network Connection,0P**Pn>W9  ޑ ! `>W9 8n w)C@ X,Intel(R) 82574L Gigabit Network Connection,0 ` `P@ ElfChnkoox@HWL9:=)Uf?mMF -^F&&.wL QSɊhW**o @C  VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  8 !@ @C &_  oMicrosoft-Windows-DNS-Clientn~Ix=MSystem   @\oD EventDataA;oData= QueryName A1#= AddressLength A%=Address 4win10.ipv6.microsoft.com./**pz-E  VP&  8 !@z-E @WYtS@yu * pMicrosoft-Windows-DNS-Clientn~Ix=MSystem  4win10.ipv6.microsoft.com.>**q JH  VP&  @ ! JH &_\L qMicrosoft-Windows-Kernel-GeneralOצ]System xL xLWְ2_͔A%=NewTime A%=OldTime A#=Reason `~H F xL**prA$H  ޑ ޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  !A$H r w)Cw)C-Q /J>  !BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**PsaH  ޑ  ! `aH s w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**PtmH  ޑ  !mH  t w)CX,Intel(R) 82574L Gigabit Network Connection,0aP**Pu1H  ޑ  ! `1H 0 u w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Hvm I  VP&  @ /!m I #\L vMicrosoft-Windows-Kernel-GeneralOצ]System xL pc I kOI H**Pw;I  ޑ  !;I w w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Px^ ]I  ޑ  ! `^ ]I  x w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**yI  VP&  8 !@I   yMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPic**Hz22N  VP&  @ /!22N \L zMicrosoft-Windows-Kernel-GeneralOצ]System xL `o2N \J H**H{W`N  VP&  @ /!W`N &_\L {Microsoft-Windows-Kernel-GeneralOצ]System xL 0W`N h @N PH**P|>PP  ޑ  !>PP 4| w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P}&ލP  ޑ  ! `&ލP (#} w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**H~E1R  VP&  @ /!E1R &_\L ~Microsoft-Windows-Kernel-GeneralOצ]System xL s1R }5P eH**PaVQR  ޑ  !aVQR (# w)CX,Intel(R) 82574L Gigabit Network Connection,0WP**PmpTR  ޑ  ! `mpTR  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**HV  VP&  @ /!V #\L Microsoft-Windows-Kernel-GeneralOצ]System xL V UR H**H&W  VP&  @ /!&W \L Microsoft-Windows-Kernel-GeneralOצ]System xL 3&W W UH**PLAW  ޑ  !LAW p! w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P!cDW  ޑ  ! `!cDW   w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` ` P**H,_Z  VP&  @ /!,_Z #\L Microsoft-Windows-Kernel-GeneralOצ]System xL i_Z _JW H**HM/Z  VP&  @ /!M/Z \L Microsoft-Windows-Kernel-GeneralOצ]System xL `/0Z 0&Z H**H/b  VP&  @ /!/b \L Microsoft-Windows-Kernel-GeneralOצ]System xL /b ([ H**Hfrub  VP&  @ /!frub \L Microsoft-Windows-Kernel-GeneralOצ]System xL 0rub !Sb  H** #ܐym   &. #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}#ܐym  w)CPF38182360480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189 C **Hym  VP&  @ /!ym KLBJ\L Microsoft-Windows-Kernel-GeneralOצ]System xL ym }e H**HEu  VP&  @ /!Eu &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL Eu u%Vm H**HK v  VP&  @ /!K v &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL v  u rH**H?x  VP&  @ /!?x &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL 0ox LTw H**Hh){  VP&  @ /!h){ &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL R){ =G$x aH**H   VP&  @ /!  &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL p- 9{ H**HL  VP&  @ /!L 'N2>G"\L Microsoft-Windows-Kernel-GeneralOצ]System xL L Ǜ ! H**Hv͑  VP&  @ /!v͑ 'N2>G"\L Microsoft-Windows-Kernel-GeneralOצ]System xL ͑ :p H**H  VP&  @ /! &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL ܋ D H**H 1  VP&  @ /! 1 &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL <1 EQ; H**HC  VP&  @ /!C &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL `C 5` H**H",  VP&  @ /!", \L Microsoft-Windows-Kernel-GeneralOצ]System xL D", u H**H8R  VP&  @ /!8R \L Microsoft-Windows-Kernel-GeneralOצ]System xL R q;&  H**H-x  VP&  @ /!-x &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL pQx  M lH**H^  VP&  @ /!^ &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL ^ Fa oH**j  VP&  J ! , j PW(3HmY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber Definition Update for Windows Defender - KB2267602 (Definition 1.249.443.0)|yDC**Mj  VP&  J ! + Mj PW(3HmY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  FDefinition Update for Windows Defender - KB2267602 (Definition 1.249.443.0)|yDC4L G**Ht̻  VP&  @ /!t̻ PW(3HmY(3\L Microsoft-Windows-Kernel-GeneralOצ]System xL }̻ # 7H**aaѻ  VP&  J ! aaѻ &_Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC wLnC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid Definition Update for Windows Defender - KB2267602 (Definition 1.249.443.0)|yDCCCpe,w** kԻ  VP&  J ! + kԻ &_Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNL **XCjԻ  VP&  J 5! (CjԻ &_Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem h]kQh]k8bQ WOb"A)= errorCode A-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid $2017-07 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4025342)%@bNLCCpe,wX**8vۻ  >S>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4})U`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@vۻ PT# PzGhWPzGe\UA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName $MpKsla9ea57e4C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E277DA85-205C-4134-9089-3659B0389DB1}\MpKsla9ea57e4.syskernel mode driversystem start8**y#*  VP&  J m! , y#* PW(3HmY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F>Microsoft Engagement Framework3QDN/XL**#*  VP&  J m! , #* PW(3HmY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F>Microsoft Engagement Framework3QDN/XL**`-  VP&  @ E!- PW(3HmY(3Microsoft-Windows-Kernel-GeneralOצ]System $3-^$3]SW=vA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages $\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\ActivationStore.datew`**hVj.  VP&  @ M!Vj. PW(3HmY(3Microsoft-Windows-Kernel-GeneralOצ]System $3-^$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\ActivationStore.datrah**<0  VP&  J u! , <0 PW(3HmY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  FFMicrosoft Advertising SDK for XAML^VYN;Ę˜**Xo!3  VP&  @ ;!o!3 PW(3HmY(3Microsoft-Windows-Kernel-GeneralOצ]System $3-^\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1707.2.0_x64__8wekyb3d8bbwe\ActivationStore.datm/DX**XĶ4  VP&  @ ;!Ķ4 PW(3HmY(3Microsoft-Windows-Kernel-GeneralOצ]System $3-^\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1707.2.0_x86__8wekyb3d8bbwe\ActivationStore.daterpX**Hb\־  VP&  @ /!b\־ &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL P]\־ = H**HJe/  VP&  @ /!Je/ \L Microsoft-Windows-Kernel-GeneralOצ]System xL P/ .$ H**HP%J  VP&  @ /!P%J \L Microsoft-Windows-Kernel-GeneralOצ]System xL %J ; H**Pd  ޑ  !d  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P*;g  ޑ  ! `*;g X w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**;l  VP&  8 !@;l &_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H9~  VP&  @ /!9~ &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL  m CH**P5  ޑ  !5 X w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P  ޑ  ! `  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**Pf  ޑ  !f X w)CX,Intel(R) 82574L Gigabit Network Connection,0P**H6pv  VP&  @ /!6pv #\L Microsoft-Windows-Kernel-GeneralOצ]System xL v  oH**P*x  ޑ  ! `*x X w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P** ox  VP&  8 !@ ox # PMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP** }  VP&  8 !@ }  TMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP **Hlj  VP&  @ /!lj \L Microsoft-Windows-Kernel-GeneralOצ]System xL @;k 5ޙ H**P  ޑ  !  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P  ޑ  ! `  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**P/Q  ޑ  !/Q  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P9f  ޑ  ! `9f  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**   VP&  8 !@  #  Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**H  VP&  @ /! #\L Microsoft-Windows-Kernel-GeneralOצ]System xL  = 0 )H**p  VP&  8 _!@  PMicrosoft-Windows-DNS-Clientn~Ix=MSystem  0localdomain.localdomain50p**H  VP&  @ /! \L Microsoft-Windows-Kernel-GeneralOצ]System xL   # H**PSy  VP&  < 8!%Sy &_HMicrosoft-Windows-Time-ServiceSNʦSystem fx-Ɋfx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)AP**H ?  VP&  < 2!# ? HMicrosoft-Windows-Time-ServiceSNʦSystem (sv(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)H**H{>  VP&  @ /!{> &_HMicrosoft-Windows-Kernel-GeneralOצ]System xL `? ? H**Py  ޑ  !y T w)CX,Intel(R) 82574L Gigabit Network Connection,0P**H$Ț  VP&  @ /!$Ț &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL  ǚ  H**P.  ޑ  ! `. h w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `sP**4.  ==\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@4.   w)C00@**vd0  = M!vd0 T w)C((**  VP&  8 !@ &_ LMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**P  ޑ  !  w)CX,Intel(R) 82574L Gigabit Network Connection,0.P**PL  ޑ  ! `L ( w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `oP**PZ"a  ޑ  !Z"a  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**PLCd  ޑ  ! `LCd  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `7P**/h  VP&  8 !@/h #  Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP22**hT   &. !}T  w)CPF41636660480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189iverh**P  ޑ  !  w)CX,Intel(R) 82574L Gigabit Network Connection,0AP**H  VP&  @ /! &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL ]  H**Pi'  ޑ  ! `i'  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**[5   = U!@[5  <  w)C00@ #**[5   = M![5   w)C((1**H  VP&  8 !@H &_ "Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPI)**(  VP&  J [! , ( PW(3*Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F,Paid Wi-Fi & CellularRAMq0ހ**PF,  VP&  @ 3!F, PW(3*Y(3 Microsoft-Windows-Kernel-GeneralOצ]System $3-^ \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_2.1706.1934.0_x64__8wekyb3d8bbwe\ActivationStore.dat3HP**R,  VP&  J [! + R, PW(3*Y(3pMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F,Paid Wi-Fi & CellularRAMq0**,  VP& @ !, PW(3*Y(3 [Microsoft-Windows-Kernel-GeneralOצ]System $3-^a\??\C:\Users\tony\AppData\Local\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings\settings.dat;X**s-  VP&  J o! s- PW(3MY(3pMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC wL,Paid Wi-Fi & CellularRAMq0|^LEPB**weƔ  VP&  < !%weƔ &_HMicrosoft-Windows-Time-ServiceSNʦSystem fx-Ɋ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)**Δ  VP&  < !#Δ &_HXMicrosoft-Windows-Time-ServiceSNʦSystem (sv~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.141.32.51:123)I**HΔ  VP&  @ /!Δ &_HMicrosoft-Windows-Kernel-GeneralOצ]System xL Δ Δ H**P–ޔ  ޑ  !–ޔ  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P9!  ޑ  ! `9!  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `cP**P^  ޑ  !^  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P<x  ޑ  ! `<x  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**  VP&  8 !@  Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUPI**P&@  ޑ  !&@ l w)CX,Intel(R) 82574L Gigabit Network Connection,0oP**PD  ޑ  ! `D  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**gVH  VP&  8 !@gVH # Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP-W**Ppө  ޑ  !pө   w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Pb֩  ޑ  ! `b֩   w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**PO*ש  ޑ  !O*ש H w)CX,Intel(R) 82574L Gigabit Network Connection,0P**دש  VP&  8 !@دש &_ 8Microsoft-Windows-DNS-Clientn~Ix=MSystem  oem.twimg.com **PE:ک  ޑ  ! `E:ک   w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**nj  VP&  8 !@nj # Microsoft-Windows-DNS-Clientn~Ix=MSystem  4win10.ipv6.microsoft.com.ޑ**H2./  VP&  @ /!2./ &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL p:. r H**P"  ޑ  !"  w)CX,Intel(R) 82574L Gigabit Network Connection,0P**c  VP&  8 !@c # Microsoft-Windows-DNS-Clientn~Ix=MSystem  www.bing.com**P@İ  ޑ  ! `@İ H w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**ɰ  VP&  8 !@ɰ  hMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP-W**Pٮ̰  ޑ  !ٮ̰ @ w)CX,Intel(R) 82574L Gigabit Network Connection,0P**Pװϰ  ޑ  ! `װϰ H w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**D԰  VP&  8 !@D԰  hMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP-D**hJIe   &. !}JIe  w)CPF42757160480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189h**PN+%C  ޑ  !N+%C H w)CX,Intel(R) 82574L Gigabit Network Connection,0P**HNEe  VP&  @ /!NEe &_\L Microsoft-Windows-Kernel-GeneralOצ]System xL Ee % (C H**P\e  ޑ  ! `\e <  w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `sP**e  = U!@e X" w)C00@I**e  = M!e  w)C((**hG^1  &. !}G^1 w)CPF42757960480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189h**P[]e  ޑ  ![]e  w)CX,Intel(R) 82574L Gigabit Network Connection,0 P**H[51 VP&  @ /![51#\L Microsoft-Windows-Kernel-GeneralOצ]System xL Pm31Ee oH**P5t1 ޑ  ! `5t1@ w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `oP**ބ1 VP&  8 !@ބ1&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**j&1 VP&  @ c!j&1&_Microsoft-Windows-Kernel-GeneralOצ]System iC^iC^sZ9WZDNCRFJBD8-Microsoft.XboxAppߢCOi)iH**1Ԯ}1 VP&  J ! , 1Ԯ}1PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9NBLGGH42THS-Microsoft.Microsoft3DViewerv=!}D k໑5@**1 VP&  J ! 1&_ Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Definition Update for Windows Defender - KB2267602 (Definition 1.251.1167.0)(4C @)kCCpe,w**0ߕF1 VP&  J  ! , ߕF1PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-09 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4038806)>GDnEL0**F1 VP&  J ! , F1PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-09 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4038788)VdM^iO5rY+VP&**pG1 VP&  J K! , G1PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - September 2017 (KB890830)#8C m*p**8 S1 >..>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}y/`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@ S1PX PzG1PzGe\UA-$= ServiceName A)$= ImagePath A-$= ServiceType A)$= StartType A-$= AccountName $MpKslb5e303cbC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{ADF76B9E-87A1-49F7-86ED-986917A91502}\MpKslb5e303cb.syskernel mode driversystem startdo8**He1 VP&  @ -!e1US5B24 X  Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_31.32.11001.0_x64__8wekyb3d8bbwe\ActivationStore.datH**h1 VP&  @ I!1US5B24 X Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1706.2211.0_x64__8wekyb3d8bbwe\ActivationStore.dat@h**S 1 VP&  @ !S 1!#Microsoft-Windows-Kernel-GeneralOצ]System iC^ :iC^sZ $ I!BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**'Gc1 VP&  @ !Gc1#\L 'Microsoft-Windows-Kernel-GeneralOצ]System xL]KxLWְ2_͔A%$=NewTime A%$=OldTime A#$=Reason pb1O)1ndo**P(Ps1 ޑF ! `Ps1( w)C@IX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**) 1 =M=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@ 1) w)C@I00@2)*** 1 =M M! 1* w)C@I((do**+1 VP&  8 !@1-5KiOcfN  +Microsoft-Windows-DNS-Clientn~Ix=MSystem  MR @\oA)$= QueryName A1$#= AddressLength A%$=Address >_ldap._tcp.dc._msdcs.WORKGROUP**`,1 VP&  @ C!1X  ,Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1706.29032.0_x64__8wekyb3d8bbwe\ActivationStore.datA`**H-.ž1 VP&  @ -!.ž1X -Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_31.32.11001.0_x64__8wekyb3d8bbwe\ActivationStore.datH**`.J1 VP&  @ C!J1X  .Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1706.29032.0_x64__8wekyb3d8bbwe\ActivationStore.datlie`** /mb6  [ #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}mb6/ w)C@IPF42837060480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189Di **P0-1 ޑF !-1X"0 w)C@IX,Intel(R) 82574L Gigabit Network Connection,0aP**H1W6 VP&  @ /!W6#\L 1Microsoft-Windows-Kernel-GeneralOצ]System xL]KpS6H1\H**P2j6 ޑF ! `j62 w)C@IX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**3k(6 =M U!@k(63 w)C@I00@em**4)6 =M M!)64 w)C@I((**5%6 VP&  8 !@%6  5Microsoft-Windows-DNS-Clientn~Ix=MSystem  MR>_ldap._tcp.dc._msdcs.WORKGROUPĶ4**6(6 VP& @ !(6H 6[Microsoft-Windows-Kernel-GeneralOצ]System $3_\??\C:\Users\tony\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.datt**7T,6 VP&  J o! , T,6PW(3|Y(3$"7Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  @9WZDNCRFHVFW-Microsoft.BingNews|?K\k,5n **8s,6 VP&  J ! , s,6PW(3|Y(3$"8Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9NBLGGH42THS-Microsoft.Microsoft3DViewerv=!}D k໑5**9,6 VP&  J m! , ,6PW(3|Y(3$"9Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >9WZDNCRFJBD8-Microsoft.XboxAppߢCOi)iHI**:TP6 VP&  J ! , TP6PW(3|Y(3$":Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.251.1466.0)`NKۃ_/-;l**0;R6 VP&  J  ! + R6PW(3|Y(3 ;Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-09 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4038806)>GDnEL0**@<J8yT6 VP&  J ! J8yT6PW(3|Y(3 <Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC 2017-09 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4038806)>GDnELCCpe,w@**p=2T6 VP&  J K! + 2T6PW(3|Y(3 =Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - September 2017 (KB890830)#8C m,p**>vw6 VP&  J _! vw6 >Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - September 2017 (KB890830)#8C mCCpe,wonne**?}w6 VP&  J ! + }w6 ?Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.251.1466.0)`NKۃ_/-**@D\6 VP&  J ! D\6 @Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC Definition Update for Windows Defender - KB2267602 (Definition 1.251.1466.0)`NKۃ_/-CCpe,w** A=6 >..  g!@=6PA PzG1$MpKsl733d6e25C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C621C490-A9C2-4EE9-963A-675095D2F43F}\MpKsl733d6e25.syskernel mode driversystem start **`B.f6 VP&  @ C!.f6&_X BMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1706.29032.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**PCHM6 ޑF !HM6 C w)C@IX,Intel(R) 82574L Gigabit Network Connection,0P**HDg%6 VP&  @ /!g%6#\L DMicrosoft-Windows-Kernel-GeneralOצ]System xL]KCg%6Q6H**PEu%6 ޑF ! `u%6 E w)C@IX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**F'6 =M U!@'6F w)C@I00@ic**G'6 =M M!'6G w)C@I(( **H*HP+6 VP&  8 !@*HP+6&_ HMicrosoft-Windows-DNS-Clientn~Ix=MSystem  MR>_ldap._tcp.dc._msdcs.WORKGROUPGe**PIr6 ޑF !r6 I w)C@IX,Intel(R) 82574L Gigabit Network Connection,0P**HJ\6 VP&  @ /!\6#\L JMicrosoft-Windows-Kernel-GeneralOצ]System xL]K \66H**PKa ]6 ޑF ! `a ]6TK w)C@IX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**LB^6 =M U!@B^6TL w)C@I00@3**MB^6 =M M!B^6 M w)C@I((Ge**NXb6 VP&  8 !@Xb6 NMicrosoft-Windows-DNS-Clientn~Ix=MSystem  MR>_ldap._tcp.dc._msdcs.WORKGROUP**O7Xå6 VP&  J ! , 7Xå6&_xOMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  `9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktopo3%9WZDNCRFJBD8-Microsoft.XboxAppߢCOi)iH**]{6 VP& @ !{6PW(3Y(3X  ][Microsoft-Windows-Kernel-GeneralOצ]System $3^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.datct**^jS6 VP&  J ! jS6PW(34Y(3^Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC >9WZDNCRFJBD8-Microsoft.XboxAppߢCOi)iH|^LEPB0**X_n6 VP&  @ ;!n6PW(34Y(3X _Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1709.1.0_x64__8wekyb3d8bbwe\ActivationStore.datX**`6 VP&  J y! , 6PW(34Y(3`Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  J9NBLGGH33ZDV-A278AB0D.MarchofEmpiresX JMG:**a"6 VP&  J ! + "6PW(34Y(3aMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  P9NBLGGH1QWGC-Microsoft.Advertising.XamlUâTJXEv**b86 VP&  J ! 86PW(3Y(3bMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC P9NBLGGH1QWGC-Microsoft.Advertising.XamlUâTJXEv|^LEPB**ck=6 VP&  J o! + k=6PW(3Y(3cMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  @9WZDNCRFHVFW-Microsoft.BingNews|?K\k,5n**d66 VP& @ !66PW(3Y(3X d[Microsoft-Windows-Kernel-GeneralOצ]System $3_\??\C:\Users\tony\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings\settings.dat**e}m 6 VP&  J ! }m 6PW(3(Z(3eMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC @9WZDNCRFHVFW-Microsoft.BingNews|?K\k,5n|^LEPB**fU 6 VP&  J u! , U 6PW(3|Y(3$"fMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F9WZDNCRDTBVB-Microsoft.WindowsMaps6tAb] ** g 6 VP& @ ! 6PW(3|Y(3g[Microsoft-Windows-Kernel-GeneralOצ]System $3e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat 257 **`h;6 VP&  @ C!;6PW(3|Y(3X hMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1706.2271.0_x64__8wekyb3d8bbwe\ActivationStore.dat `**i6 VP&  J ! + 6PW(3(Z(3iMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9WZDNCRFHVN5-Microsoft.WindowsCalculator gHj y**(jV6 VP& @ !V6PW(3(Z(3X j[Microsoft-Windows-Kernel-GeneralOצ]System $3h\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat (**kp6 VP&  J ! p6PW(3Y(3kMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC R9WZDNCRFHVN5-Microsoft.WindowsCalculator gHj y|^LEPB**lh6 VP&  J y! , h6PW(3|Y(3$"lMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsh`K@$oE:ڠ**Hm6 VP&  @ /!6PW(3|Y(3X  mMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.7.0.13_x86__h6adky7gbf63m\ActivationStore.dat H**n_"6 VP&  J y! + _"6PW(3Y(3nMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  J9NBLGGH33ZDV-A278AB0D.MarchofEmpiresX JMG:oso** o36 VP& @ !36PW(3Y(3X  o[Microsoft-Windows-Kernel-GeneralOצ]System $3d\??\C:\Users\tony\AppData\Local\Packages\A278AB0D.MarchofEmpires_h6adky7gbf63m\Settings\settings.dat **p=6 VP&  J ! =6PW(35+Z(3pMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC J9NBLGGH33ZDV-A278AB0D.MarchofEmpiresX JMG:|^LEPB**Pq6 VP&  @ 5!6PW(35+Z(3X qMicrosoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1706.2001.0_x64__8wekyb3d8bbwe\ActivationStore.datdaP**riW6 VP&  J ! , iW6PW(35+Z(3rMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  T9NBLGGH4R32N-Microsoft.WindowsFeedbackHubd)#DA~g&J¸ G**stW6 VP&  J u! + tW6PW(35+Z(3sMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  F9WZDNCRDTBVB-Microsoft.WindowsMaps6tAb] **tA6 VP& @ !A6PW(35+Z(3X t[Microsoft-Windows-Kernel-GeneralOצ]System $3b\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat***u6 VP&  J ! 6PW(3yY(3uMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC F9WZDNCRDTBVB-Microsoft.WindowsMaps6tAb] |^LEPBele**Xvh6 VP&  @ ;!h6PW(3yY(3X vMicrosoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.2231.0_x64__8wekyb3d8bbwe\ActivationStore.datX**w:ݏ 6 VP&  J ! , :ݏ 6PW(3yY(3wMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2O&Hp,**x\ݏ 6 VP&  J y! + \ݏ 6PW(3yY(3xMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsh`K@$o**** yD 6 VP& @ !D 6PW(3yY(3X y[Microsoft-Windows-Kernel-GeneralOצ]System $3d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.datndow **z& p!6 VP&  J ! & p!6PW(3u+Z(3zMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsh`K@$o|^LEPB**{ %6 VP&  J ! , %6PW(3|Y(3$"{Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  h9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection6}`OjÈхerne**`|Wf(-6 VP&  @ C!Wf(-6PW(3|Y(3X |Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1705.2121.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**}"Az-6 VP&  J ! + "Az-6PW(3u+Z(3}Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  T9NBLGGH4R32N-Microsoft.WindowsFeedbackHubd)#DA~g&J¸@**(~E_-6 VP& @ !E_-6PW(3u+Z(3X ~[Microsoft-Windows-Kernel-GeneralOצ]System $3i\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat(**+.6 VP&  J ! +.6PW(36Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC T9NBLGGH4R32N-Microsoft.WindowsFeedbackHubd)#DA~g&J¸|^LEPB**_16 VP&  J }! , _16PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  N9NBLGGH537C2-Microsoft.XboxGameOverlay%[LJC܌(a**Xqja@6 VP&  @ ;!qja@6PW(3|Y(3X Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.21.11001.0_x64__8wekyb3d8bbwe\ActivationStore.datckaX**Ѱ@6 VP&  J }! + Ѱ@6PW(36Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  N9NBLGGH537C2-Microsoft.XboxGameOverlay%[LJC܌(** {^@6 VP& @ !{^@6PW(36Y(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3f\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.datof **QwA6 VP&  J ! QwA6PW(3/Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC N9NBLGGH537C2-Microsoft.XboxGameOverlay%[LJC܌(|^LEPBGGH**vE6 VP&  J ! , vE6PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  `9WZDNCRCWFTB-ThumbmunkeysLtd.PhototasticCollageqkMBnqstem**p)F6 VP&  @ S!)F6PW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3*\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.17.8161.0_x64__8wekyb3d8bbwe\ActivationStore.dat p**ŻgI6 VP&  J ! , ŻgI6PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ **h2%K6 VP&  @ M!2%K6PW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\ActivationStore.dathicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem ElfChnk(x|wr=(f?mMF$g ƿ& y") **@3L6 VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @ s!3L6PW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3$3]SW=vD EventDataAEoData%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages $\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\ActivationStore.datwsUp@**T=M6 VP&  J g! + T=M6PW(3/Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g  zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ - KB**%{N6 VP&  J ! %{N6PW(31Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC nC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ |^LEPBroso**$yN6 VP&  J ! + $yN6PW(31Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g h9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection6}`OjÈхindo**851.140.127.197:123)P**P]f6 VP&  < 6!#]f6&_HMicrosoft-Windows-Time-ServiceSNʦSystem (svy"(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.127.197:123)i)iHP**!\f6 VP&  @ !!\f6&_H#Microsoft-Windows-Kernel-GeneralOצ]System xL$xLWְ2_͔A%=NewTime A%=OldTime A#=Reason ]f6]f6**`'o6 VP&  @ E!'o6&_X Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\ThumbmunkeysLtd.PhototasticCollage_2.0.94.0_x64__nfy108tqq3p12\ActivationStore.dat`**P>p6 VP&  @ 5!>p6&_X Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\flaregamesGmbH.RoyalRevolt2_3.6.0.0_x86__g0q0z3kw54rap\ActivationStore.datsoP**#¾p6 VP&  J ! , #¾p6PW(3"1Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ ! ***¾p6 VP&  J ! , *¾p6PW(3"1Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ emb**:¾p6 VP&  J ! + :¾p6PW(3"1Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2O&Hp,01**(q6 VP& @ !q6PW(3"1Z(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3h\??\C:\Users\tony\AppData\Local\Packages\flaregamesGmbH.RoyalRevolt2_g0q0z3kw54rap\Settings\settings.datPX(**hq r6 VP&  @ M!q r6PW(3"1Z(3X Microsoft-Windows-Kernel-GeneralOצ]System $3$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\ActivationStore.datkh**h|r6 VP&  @ M!|r6PW(3"1Z(3X Microsoft-Windows-Kernel-GeneralOצ]System $3$\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\ActivationStore.datonh**Or6 VP&  J ! Or6PW(3h5Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2O&Hp,|^LEPBr**r6 VP&  J ! r6PW(3h5Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC b9NBLGGH51CLL-Microsoft.Services.Store.EngagementR%A%^ |^LEPBa**rr6 VP&  J ! + rr6PW(3h5Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g `9WZDNCRCWFTB-ThumbmunkeysLtd.PhototasticCollageqkMBnq **0qs6 VP& @ !qs6PW(3h5Z(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3o\??\C:\Users\tony\AppData\Local\Packages\ThumbmunkeysLtd.PhototasticCollage_nfy108tqq3p12\Settings\settings.datP0**=1u6 VP&  J y! , =1u6PW(3Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g J9WZDNCRFJBBG-Microsoft.WindowsCameraZ 4nE;: .**X1u6 VP&  J ! X1u6PW(3Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC `9WZDNCRCWFTB-ThumbmunkeysLtd.PhototasticCollageqkMBnq|^LEPB**Pv6 VP&  @ 1!v6PW(3Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\KeeperSecurityInc.Keeper_11.0.0.0_x64__kejf07qmg0jnm\ActivationStore.datP**y6 VP&  J {! , y6PW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g L9WZDNCRFJBH4-Microsoft.Windows.Photos"9NBLGGH5FV99-Microsoft.MSPaintC:  6 VP&  J o! , > 6PW(3,Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g @9WZDNCRFJ364-Microsoft.SkypeAppDڡ7Jity **> 6 VP&  J ! > 6PW(3,Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC L9WZDNCRFJBH4-Microsoft.Windows.Photos"**Hފ6 VP&  @ /!ފ6PW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1709.13037.0_x64__8wekyb3d8bbwe\ActivationStore.dat)H**!V`6 VP&  J m! + !V`6PW(3,Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g >9NBLGGH5FV99-Microsoft.MSPaintC: 9NBLGGH5FV99-Microsoft.MSPaintC: **kG6 VP&  J ! kG6PW(3Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC F9WZDNCRFJ3Q2-Microsoft.BingWeatherĕr:F0s+|^LEPB?\C**<\l6 VP&  J q! + <\l6PW(3Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g B9WZDNCRFJ3PT-Microsoft.ZuneMusiceTlGr3zD2ndo**g6 VP& @ !g6PW(3Y(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3`\??\C:\Users\tony\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat:\Pr**-d6 VP&  J ! -d6PW(3@Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC B9WZDNCRFJ3PT-Microsoft.ZuneMusiceTlGr3zD2|^LEPBڨ**'K*6 VP&  " !'K*6&_\ Application PopupGTO )ʏSystem "O"OZ_ksօj^A%=Caption A%=Message 4yara64.exe - System ErrorThe code execution cannot proceed because VCRUNTIME140.dll was not found. Reinstalling the program may fix this problem. b** =  ڞ #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !} = w)Cw)C-Q /J>  (!BinaryPF43078960480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189**+ 06 ޑޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  ! !+ 06  w)CX,Intel(R) 82574L Gigabit Network Connection,0|**H = VP&  @ /! =#\L Microsoft-Windows-Kernel-GeneralOצ]System xL$PV =9306H**PW = ޑ ! `W =d w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `\P**q" = =ƿ=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@q" =t! w)C00@ct**4# = =ƿ M!4# =t! w)C((so**hX.D  ڞ !}X.D w)CPF43079160480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189al\Ph**POx = ޑ !Ox =" w)CX,Intel(R) 82574L Gigabit Network Connection,0P**H .D VP&  @ /! .D#\L Microsoft-Windows-Kernel-GeneralOצ]System xL$ .Dy =H**Pk}Z.D ޑ ! `k}Z.D" w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**.D =ƿ U!@.D  w)C00@Ge**,W.D =ƿ M!,W.DH w)C((.0**x .D VP&  8 g!@ .D&_  Microsoft-Windows-DNS-Clientn~Ix=MSystem  @\oA)= QueryName A1#= AddressLength A%=Address  wpadx**.D VP&  8 !@.D&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP** d.D VP& @ !d.D&_" [Microsoft-Windows-Kernel-GeneralOצ]System $3d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat **@.D VP& @ !.D&_<[Microsoft-Windows-Kernel-GeneralOצ]System $3u\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat"r@**8P.D VP& @  !P.DPW(3QW(3T[Microsoft-Windows-Kernel-GeneralOצ]System $3p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat38**wj=.D VP& @ !wj=.D [Microsoft-Windows-Kernel-GeneralOצ]System $3_\??\C:\Users\tony\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dati**/D VP& @ !/D,[Microsoft-Windows-Kernel-GeneralOצ]System $3c\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.date**7/D VP&  J ! , 7/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2;XvJP0&kag**ݕ7/D VP&  J q! , ݕ7/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g B9WZDNCRFJ3P2-Microsoft.ZuneVideo)z ZBѮŅndo**7/D VP&  J ! , 7/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g h9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection:o8oB xClie**pu{X/D VP&  @ S!u{X/DPW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3*\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.17.8162.0_x64__8wekyb3d8bbwe\ActivationStore.datwekp**Z/D VP&  J ! + Z/DPW(3@Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g h9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection:o8oB xt.Wi**8#OZ/D VP& @ !#OZ/DPW(3@Z(3X  [Microsoft-Windows-Kernel-GeneralOצ]System $3s\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat8**տ\/D VP&  J ! տ\/DPW(3dY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC h9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection:o8oB x|^LEPBx6**k!`/D VP&  J {! , k!`/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g L9WZDNCRDMPT6-KeeperSecurityInc.KeepermwDTU?cGH**P+-6d/D VP&  @ 5!+-6d/DPW(3|Y(3X Microsoft-Windows-Kernel-GeneralOצ]System $3 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\flaregamesGmbH.RoyalRevolt2_3.7.0.0_x86__g0q0z3kw54rap\ActivationStore.dat\SP**3Fd/D VP&  J ! + 3Fd/DPW(3dY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2;XvJP0&.Wi**(!d/D VP& @ !!d/DPW(3dY(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3h\??\C:\Users\tony\AppData\Local\Packages\flaregamesGmbH.RoyalRevolt2_g0q0z3kw54rap\Settings\settings.dat(**!{e/D VP&  J ! !{e/DPW(3SZ(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC R9WZDNCRFHW53-flaregamesGmbH.RoyalRevolt2;XvJP0&|^LEPB1**PWh/D VP&  @ 7!Wh/DPW(3SZ(3X Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17082.14121.0_x64__8wekyb3d8bbwe\ActivationStore.datP**O i/D VP&  J y! , O i/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsAF{IrMdwe\**PZl/D VP&  @ 1!Zl/DPW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\KeeperSecurityInc.Keeper_11.0.1.0_x64__kejf07qmg0jnm\ActivationStore.dat P**nl/D VP&  J {! + nl/DPW(3SZ(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  g L9WZDNCRDMPT6-KeeperSecurityInc.KeepermwDTU?c** T6m/D VP& @ !T6m/DPW(3SZ(3X  [Microsoft-Windows-Kernel-GeneralOצ]System $3e\??\C:\Users\tony\AppData\Local\Packages\KeeperSecurityInc.Keeper_kejf07qmg0jnm\Settings\settings.dat **QBn/D VP&  J ! QBn/DPW(3Y(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC L9WZDNCRDMPT6-KeeperSecurityInc.KeepermwDTU?c|^LEPB^ **P \o/D VP&  @ 7! \o/DPW(3Y(3X Microsoft-Windows-Kernel-GeneralOצ]System $3\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17082.14121.0_x64__8wekyb3d8bbwe\ActivationStore.datnPore.dat VP&  J J?@TXSystem ElfChnk  F@K$=Qf?mMFe &_vA-**H q/D VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  J q! , q/DPW(3|Y(3$" Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem   zPLX D EventDataA?$oData= updateTitle A+$= updateGuid A?$1=updateRevisionNumber >9WZDNCRFJBD8-Microsoft.XboxAppYA"B ݈Yt\WiH**P @Ds/D VP&  @ 3!@Ds/DPW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3e $3]SW=vA3$%=HiveNameLength A'$=HiveName A-$= KeysUpdated A+$= DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1709.2621.0_x64__8wekyb3d8bbwe\ActivationStore.dattorP** Rs/D VP&  J y! + Rs/DPW(3Y(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsAF{IrMd=** 9u/D VP&  J ! 9u/DPW(3Z(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _nC o]kA-$= updateTitle A+$= updateGuid A?$1=updateRevisionNumber A-$= serviceGuid J9WZDNCRFJ3PR-Microsoft.WindowsAlarmsAF{IrMd|^LEPBFHWD** wx/D VP&  J ! , wx/DPW(3|Y(3$" Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  X9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder3];X DYҽK**PE~/D VP&  @ 7!E~/DPW(3|Y(3X  Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17082.14121.0_x64__8wekyb3d8bbwe\ActivationStore.dat-P**H^~/D VP&  @ -!^~/DPW(3|Y(3X Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_33.33.15001.0_x64__8wekyb3d8bbwe\ActivationStore.datH**~/D VP&  J q! + ~/DPW(3Z(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  B9WZDNCRFJ3P2-Microsoft.ZuneVideo)z ZBѮŅP&**[/D VP& @ ![/DPW(3Z(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3e `\??\C:\Users\tony\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat_0**/D VP&  J ! /DPW(3bY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _B9WZDNCRFJ3P2-Microsoft.ZuneVideo)z ZBѮŅ|^LEPB**mn/D VP&  J m! + mn/DPW(3bY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >9WZDNCRFJBD8-Microsoft.XboxAppYA"B ݈Y**K#/D VP& @ !K#/DPW(3bY(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3e ^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat7z**Հ/D VP&  J ! , Հ/DPW(3pY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9WZDNCRFHVN5-Microsoft.WindowsCalculatorK?>M{uM**Հ/D VP&  J ! Հ/DPW(3pY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _>9WZDNCRFJBD8-Microsoft.XboxAppYA"B ݈Y|^LEPB.1**h~C/D VP&  @ I!~C/DPW(3pY(3X Microsoft-Windows-Kernel-GeneralOצ]System $3e  \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1709.2703.0_x64__8wekyb3d8bbwe\ActivationStore.dath**$2/D VP&  J ! , $2/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  b9WZDNCRFHVQM-microsoft.windowscommunicationsapps7p8NJﲽ .94**Ӛ/D VP&  J ! + Ӛ/DPW(3pY(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  X9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder3];X DYҽKogra**(ƅ/D VP& @ !ƅ/DPW(3pY(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3e k\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.datg(**0d/D VP&  J ! 0d/DPW(3WZ(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _X9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder3];X DYҽK|^LEPBb**B*/D VP&  J {! , B*/DPW(3|Y(3$"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  L9WZDNCRFJBH4-Microsoft.Windows.PhotosOvɲGSs2͝Sy**`o)(/D VP&  @ C!o)(/DPW(3|Y(3X Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1709.2703.0_x64__8wekyb3d8bbwe\ActivationStore.datt2_`**ב/D VP&  J ! + ב/DPW(3WZ(3Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9WZDNCRFHVN5-Microsoft.WindowsCalculatorK?>M{uMgra**(ی/D VP& @ !ی/DPW(3WZ(3X [Microsoft-Windows-Kernel-GeneralOצ]System $3e h\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat]Sys(** Bl/D VP&  J ! Bl/DPW(3Y(3 Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _R9WZDNCRFHVN5-Microsoft.WindowsCalculatorK?>M{uM|^LEPB**![d#/D VP&  J ! , [d#/DPW(3|Y(3$"!Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9NBLGGH42THS-Microsoft.Microsoft3DViewery$\cLNdGK**`"_g/D VP&  @ E!_g/DPW(3|Y(3X "Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\ActivationStore.datdo`**p# g/D VP&  @ U! g/DPW(3|Y(3X  #Microsoft-Windows-Kernel-GeneralOצ]System $3e ,\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\ActivationStore.datump**`$R/D VP&  @ E!R/DPW(3|Y(3X $Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**%^]/D VP&  J {! + ^]/DPW(3Y(3%Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  L9WZDNCRFJBH4-Microsoft.Windows.PhotosOvɲGSs2͝*** & /D VP& @ ! /DPW(3Y(3X &[Microsoft-Windows-Kernel-GeneralOצ]System $3e e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat ati **'o9/D VP&  J ! o9/DPW(3\Y(3'Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _L9WZDNCRFJBH4-Microsoft.Windows.PhotosOvɲGSs2͝|^LEPB9NBLGGH5FV99-Microsoft.MSPaint%OGҭFg**`+#{/D VP&  @ A!#{/DPW(3|Y(3X +Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1709.8012.0_x64__8wekyb3d8bbwe\ActivationStore.dat`**,3/D VP&  J ! + 3/DPW(3\Y(3,Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  R9NBLGGH42THS-Microsoft.Microsoft3DViewery$\cLNdGKepe**(-cR/D VP& @ !cR/DPW(3\Y(3X -[Microsoft-Windows-Kernel-GeneralOצ]System $3e h\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.datacka(**.D/D VP&  J ! D/DPW(3]Z(3.Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _R9NBLGGH42THS-Microsoft.Microsoft3DViewery$\cLNdGK|^LEPB**H//D VP&  @ -!/DPW(3]Z(3X  /Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1710.4027.0_x64__8wekyb3d8bbwe\ActivationStore.datH**0ٸ/D VP&  J q! , ٸ/DPW(3]Z(30Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  B9WZDNCRFJ3PT-Microsoft.ZuneMusicиVESj+yIn**1ٸ/D VP&  J m! + ٸ/DPW(3]Z(31Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  >9NBLGGH5FV99-Microsoft.MSPaint%OGҭF**p2/D VP&  @ U!/DPW(3]Z(3X 2Microsoft-Windows-Kernel-GeneralOצ]System $3e ,\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\ActivationStore.datp**3"/D VP& @ !"/DPW(3]Z(3X  3[Microsoft-Windows-Kernel-GeneralOצ]System $3e ^\??\C:\Users\tony\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat**45m/D VP&  J ! 5m/DPW(3X^Z(34Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _>9NBLGGH5FV99-Microsoft.MSPaint%OGҭF|^LEPB****5ù/D VP&  J ! + ù/DPW(3X^Z(35Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  b9WZDNCRFHVQM-microsoft.windowscommunicationsapps7p8NJﲽ **6/D VP&  J {! , /DPW(3Y(36Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  L9WZDNCRFHVJL-Microsoft.Office.OneNote-l5I?>Q"tne**7/D VP&  J ! /DPW(3Y(37Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _b9WZDNCRFHVQM-microsoft.windowscommunicationsapps7p8NJﲽ |^LEPBf**8lቾ/D VP&  J w! , lቾ/DPW(3|Y(3$"8Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  H9WZDNCRFJBMP-Microsoft.WindowsStoreA/`LWIogra**P9k/D VP&  @ 7!k/DPW(3|Y(3X  9Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\ActivationStore.dat9P**X:/D VP&  @ ;!/DPW(3|Y(3X :Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\ActivationStore.datX**;4N0/D VP&  J q! + 4N0/DPW(3Y(3;Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  B9WZDNCRFJ3PT-Microsoft.ZuneMusicиVESj+icr**<Z/D VP& @ !Z/DPW(3Y(3X <[Microsoft-Windows-Kernel-GeneralOצ]System $3e `\??\C:\Users\tony\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat@**=2@E/D VP&  J ! 2@E/DPW(3Y(3=Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _B9WZDNCRFJ3PT-Microsoft.ZuneMusicиVESj+|^LEPB_**>uk/D VP&  J w! + uk/DPW(3Y(3>Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  H9WZDNCRFJBMP-Microsoft.WindowsStoreA/`LWIFJBH**X?gĠ/D VP&  @ ?!gĠ/DPW(3Y(3X ?Microsoft-Windows-Kernel-GeneralOצ]System $3e \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8568.57631.0_x64__8wekyb3d8bbwe\ActivationStore.datX**@Dl/D VP&  J ! Dl/DPW(3Y(3@Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _H9WZDNCRFJBMP-Microsoft.WindowsStoreA/`LWI|^LEPBJ**An/D VP&  J {! + n/DPW(3Y(3AMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  L9WZDNCRFHVJL-Microsoft.Office.OneNote-l5I?>Q"t ** Bt/D VP& @ !t/DPW(3Y(3X B[Microsoft-Windows-Kernel-GeneralOצ]System $3e e\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat **CxH/D VP&  J ! xH/DPW(3Y(3CMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _L9WZDNCRFHVJL-Microsoft.Office.OneNote-l5I?>Q"t|^LEPB**DG"0D VP&  @ !G"0D\$ DMicrosoft-Windows-Kernel-GeneralOצ]System $3e X,\SystemRoot\System32\Config\RegBack\SECURITYgs.da**EMM%0D VP&  @ !MM%0D\$ EMicrosoft-Windows-Kernel-GeneralOצ]System $3e X,\SystemRoot\System32\Config\RegBack\SOFTWARE*A?S**FP%0D VP&  @ }!P%0D\$ FMicrosoft-Windows-Kernel-GeneralOצ]System $3e T*\SystemRoot\System32\Config\RegBack\SYSTEM?re**Gו%0D VP&  @ !ו%0D\$ GMicrosoft-Windows-Kernel-GeneralOצ]System $3e V+\SystemRoot\System32\Config\RegBack\DEFAULTI&d**H%0D VP&  @ w!%0D\$ HMicrosoft-Windows-Kernel-GeneralOצ]System $3e N'\SystemRoot\System32\Config\RegBack\SAMNc**PI!&0D VP&  < 8!%!&0D&_H !IMicrosoft-Windows-Time-ServiceSNʦSystem fx-fx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+$= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->13.79.239.69:123)eAP**HJ]/0D VP&  < 2!#]/0DHJMicrosoft-Windows-Time-ServiceSNʦSystem (svA(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+$= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->13.79.239.69:123)H**K]/0D VP&  @ !]/0DH'KMicrosoft-Windows-Kernel-GeneralOצ]System xLxLWְ2_͔A%$=NewTime A%$=OldTime A#$=Reason w]/0D]/0D**L1tA0D VP& @ o!1tA0DL[Microsoft-Windows-Kernel-GeneralOצ]System iC^iC^sZ>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}Q`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@\4w0DPP PzGPzGe\UA-$= ServiceName A)$= ImagePath A-$= ServiceType A)$= StartType A-$= AccountName $MpKsl499bd4abC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FECC34CE-6F3A-4333-8B1F-7DC44A1461EC}\MpKsl499bd4ab.syskernel mode driversystem starty8**xQ&2D VP&  8 g!@&2D&_  QMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - @\oA)$= QueryName A1$#= AddressLength A%$=Address  wpadx**Ryp3D VP&  8 !@yp3D&_  RMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad**STYD6D VP&  8 !@TYD6D&_ `SMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad**T.7D VP&  8 !@.7D&_ TMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad**Uց:D VP&  8 !@ց:D&_ $UMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpadngs.**V;D VP&  8 !@;D&_ VMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad|^**W#M>D VP&  8 !@#M>D&_ WMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpades\M**X $ !BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**P\FD ޑv ! `FD\ w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**]d_.FD VP&  8 !@d_.FD# `]Microsoft-Windows-DNS-Clientn~Ix=MSystem  - wpad8bbw**^DID VP&  8 !@DID&_ `^Microsoft-Windows-DNS-Clientn~Ix=MSystem  - wpadsic**P_&JD ޑv !&JD$_ w)CX,Intel(R) 82574L Gigabit Network Connection,0P**P`JD ޑv ! `JD$` w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**avJD VP&  8 !@vJD# 0aMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad **Hb{ND VP&  @ /!{ND&_\L bMicrosoft-Windows-Kernel-GeneralOצ]System xL`{NDZK jMDH**Hc ND VP&  @ /! ND&_\L cMicrosoft-Windows-Kernel-GeneralOצ]System xLP8NDJ&A?NDH**HdQOD VP&  @ /!QOD&_\L dMicrosoft-Windows-Kernel-GeneralOצ]System xLMODMODH**HeẹvPD VP&  @ /!ẹvPD&_\L eMicrosoft-Windows-Kernel-GeneralOצ]System xLٹvPDsOD H**fGPD VP&  8 !@GPD&_ `fMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpadroso**gQD VP&  8 !@QD&_ 4"gMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpad** h[D  ڶ #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}[Dh w)CPF44501660480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189 **Hi[D VP&  @ /![D&_\L iMicrosoft-Windows-Kernel-GeneralOצ]System xLM[D36RD.H**Hj^b[D VP&  @ /!^b[D&_\L jMicrosoft-Windows-Kernel-GeneralOצ]System xLxb[D93[DH**Hk\D VP&  @ /!\D&_\L kMicrosoft-Windows-Kernel-GeneralOצ]System xL-\D[DH**l(]\D VP&  J ! , (]\DPW(3BrZ(3lMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.253.725.0)欲X^jMʕ0**mp]\D VP&  J ! + p]\DPW(3BrZ(3`mMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Definition Update for Windows Defender - KB2267602 (Definition 1.253.725.0)欲X^jMʕ((**n|rb\D VP&  J ! |rb\D&_`nMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC _Definition Update for Windows Defender - KB2267602 (Definition 1.253.725.0)欲X^jMʕCCpe,ws** os h\D >  g!@s h\DPo PzG$MpKsl70489d89C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{685636E8-BD22-49A3-9CF1-CA463D57BE6A}\MpKsl70489d89.syskernel mode driversystem start **pTk\D VP&  J ! , Tk\DPW(3BrZ(3pMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-10 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4041676)8oPO~4acka**pqBHmn\D VP&  J G! , BHmn\DPW(3BrZ(3qMicrosoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - October 2017 (KB890830)L6f!yManp**r_\D VP&  8 !@_\D&_ rMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpaders\**se]D VP&  @ !e]D&_\,sMicrosoft-Windows-Kernel-GeneralOצ]System $3e h4\??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DATroso**Hto`D VP&  @ /!o`D&_\L tMicrosoft-Windows-Kernel-GeneralOצ]System xL`Do_DH**HuMbD VP&  @ /!MbD&_\L uMicrosoft-Windows-Kernel-GeneralOצ]System xL:MbDάKaDsH**v_bD VP&  8 !@_bD 4"vMicrosoft-Windows-DNS-Clientn~Ix=MSystem  - wpadClie**Hwԗ|bD VP&  @ /!ԗ|bD\L wMicrosoft-Windows-Kernel-GeneralOצ]System xL@|bD1ubDH**Hx`cD VP&  @ /!`cD\L xMicrosoft-Windows-Kernel-GeneralOצ]System xLycDAcDH**Hy|n0lD VP&  @ /!|n0lD\L yMicrosoft-Windows-Kernel-GeneralOצ]System xL00lD3FcDcH**Hzf0mD VP&  @ /!f0mD\L zMicrosoft-Windows-Kernel-GeneralOצ]System xL0mD/SlDH**H{$~nD VP&  @ /!$~nD\L {Microsoft-Windows-Kernel-GeneralOצ]System xL~nD}mDH**H|楰vD VP&  @ /!楰vD\L |Microsoft-Windows-Kernel-GeneralOצ]System xLvDR5nDZH**H}Z.D VP&  @ /!Z.D\L }Microsoft-Windows-Kernel-GeneralOצ]System xL'.Ds#wDH**H~jD VP&  @ /!jD&_\L ~Microsoft-Windows-Kernel-GeneralOצ]System xLDbDgH**H=͌D VP&  @ /!=͌D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL`͌D{l$DmH**{،D VP&  8 !@{،D&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  - wpadGJ?@**HY0%D VP&  @ /!Y0%D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL^%D JDH**H^D VP&  @ /!^D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLDh6D_H**PED ޑv !ED w)CX,Intel(R) 82574L Gigabit Network Connection,0eP**PD ޑv ! `DX w)CX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**8BD VP&  8 !@8BD Microsoft-Windows-DNS-Clientn~Ix=MSystem  ->_ldap._tcp.dc._msdcs.WORKGROUP **H$gD VP&  @ /!$gD\L Microsoft-Windows-Kernel-GeneralOצ]System xL` %gDV D1H**HD VP&  @ /!D\L Microsoft-Windows-Kernel-GeneralOצ]System xLpDꊖDrH**H!~pgD VP&  @ /!!~pgD\L Microsoft-Windows-Kernel-GeneralOצ]System xLpgD DH**H D VP&  @ /! D\L Microsoft-Windows-Kernel-GeneralOצ]System xL0 DDH**H$苸D VP&  @ /!$苸D\L Microsoft-Windows-Kernel-GeneralOצ]System xL苸D-2y/DH**H>-D VP&  @ /!>-D\L Microsoft-Windows-Kernel-GeneralOצ]System xLa-D%DH**&RʿD VP&  8 !@&RʿD Microsoft-Windows-DNS-Clientn~Ix=MSystem  - wpad**HC7ND VP&  @ /!C7ND\L Microsoft-Windows-Kernel-GeneralOצ]System xL6NDeyDaH**D VP&  J ! + D&_&Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  2017-10 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4041676)8oPO~4tyIn**h VD VP&  8 !@h VD&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  - wpadows\**H4D VP&  @ /!4D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLP2DED@HXSystem ElfChnk$$ަh=X$f?mMF-Pv&fFWU&"^Wu p$Z**yD VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID !  @  !yD&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLxLWְ2_D EventDataA7oData=NewTime A%=OldTime A#=Reason yDDb**Hr7OD VP&  @ /!r7OD&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL[ODTEDWH**H=%D VP&  @ /!=%D\L Microsoft-Windows-Kernel-GeneralOצ]System xLh%DarsDH**xDD VP&  8 g!@DD x$Microsoft-Windows-DNS-Clientn~Ix=MSystem  u @\oA)= QueryName A1#= AddressLength A%=Address  wpadZx**HĕD VP&  @ /!ĕD\L Microsoft-Windows-Kernel-GeneralOצ]System xLĕDIDoH**H]M D VP&  @ /!]M D\L Microsoft-Windows-Kernel-GeneralOצ]System xLW D։DH**HnfD VP&  @ /!nfD\L Microsoft-Windows-Kernel-GeneralOצ]System xL`"nfD1DDH**H~LD VP&  @ /!~LD&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL~LD4DH**ǘgD VP&  8 !@ǘgD&_ `Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadkyb3**HD VP&  @ /!D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLD/DH**Hp%D VP&  @ /!p%D\L Microsoft-Windows-Kernel-GeneralOצ]System xL%DDH**H4ND VP&  @ /!4ND\L Microsoft-Windows-Kernel-GeneralOצ]System xLYNDxIDPH**HD VP&  @ /!D\L Microsoft-Windows-Kernel-GeneralOצ]System xL`'DqDeH**HkF D VP&  @ /!kF D\L Microsoft-Windows-Kernel-GeneralOצ]System xLa DcDH**HPǚD VP&  @ /!PǚD\L Microsoft-Windows-Kernel-GeneralOצ]System xLyǚDZ=DiH**H?D VP&  @ /!?D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLP?D DyH**VD VP&  8 !@VD  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad^\**Ht%D VP&  @ /!t%D\L Microsoft-Windows-Kernel-GeneralOצ]System xL3%DD H**H&D VP&  @ /!&D\L Microsoft-Windows-Kernel-GeneralOצ]System xLB&DԳIDH**pL=6D ޑ&"ޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  !  !L=6D$ w)Cp$w)C-Q /J>  $!BinaryX,Intel(R) 82574L Gigabit Network Connection,0p**P Yj9D ޑ&" ! ` Yj9D w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `WP**"S>D VP&  8 !@"S>D# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u >_ldap._tcp.dc._msdcs.WORKGROUPTZ**4*HD VP&  8 !@4*HD&_ ,Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadצ**D VP&  8 !@D&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**Pb2D ޑ&" !b2D w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PD6D ޑ&" ! `D6D w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**/|:D VP&  8 !@/|:D `Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpades\M**MIHCD VP&  8 !@MIHCD&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadGJ?@**&6D VP&  8 !@&6D&_  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadtem **&D VP&  8 !@&D&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadMic**jE VP&  8 !@jE&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadroso**HcE VP&  @ /!cE&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL`5cE EH**WzmE VP&  8 !@WzmE&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad8bbw**H|GE VP&  @ /!|GE&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLprEjvEsH**HE)E VP&  @ /!E)E\L Microsoft-Windows-Kernel-GeneralOצ]System xLM)E ErH**MQE VP&  8 !@MQE&_ L$Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadckag**Q=Z E VP&  8 !@Q=Z E&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadntTZ**> E VP&  8 !@> E&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadtem **Hr1E VP&  @ /!r1E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL`l1E5gi] EH**HM:E VP&  @ /!M:E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL`:EE2H**H2E VP&  @ /!2E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL`FE#$EH** F$E  fF #NSɈV^УAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA"=EventLogAz    fA   System(FDESKTOP-2KGM189A  ! !}F$E w)Cp$PF46206060480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189! **HjF$E VP&  @ /!jF$E\L Microsoft-Windows-Kernel-GeneralOצ]System xL F$E5EH**Hx,E VP&  @ /!x,E\L Microsoft-Windows-Kernel-GeneralOצ]System xLx,E6i$EdH**H>F5E VP&  @ /!>F5E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL]F5E>,EH**HO=E VP&  @ /!O=E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLPO=EŮj5EeH**"C=E VP&  J ! , "C=EPW(3@Y(3 "Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  P zPLX A-= updateTitle A+= updateGuid A?1=updateRevisionNumber Definition Update for Windows Defender - KB2267602 (Definition 1.253.773.0)}67H"]**"C=E VP&  J ! + "C=EPW(3@Y(3 "Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PDefinition Update for Windows Defender - KB2267602 (Definition 1.253.773.0)}67H"ft-W**γU=E VP&  J ! γU=E&_ "Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC WUnC o]kA-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid Definition Update for Windows Defender - KB2267602 (Definition 1.253.773.0)}67H"CCpe,w**8F.=E >^W>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventGAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}X`EventSourceNameService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@F.=EP" PzGZPzGe\UA-= ServiceName A)= ImagePath A-= ServiceType A)= StartType A-= AccountName $MpKsla5aa08ceC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{61639733-3917-461A-A1FD-DAB6BC48F17F}\MpKsla5aa08ce.syskernel mode driversystem start8**e/>E VP&  8 !@e/>E&_ DMicrosoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**H@E VP&  @ /!@E&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLЯ@E;2>EuH**HAE VP&  @ /!AE&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLAE&@E@H**H}[;.JE VP&  @ /!}[;.JE\L Microsoft-Windows-Kernel-GeneralOצ]System xLo;.JE?CTAEH**HgLRE VP&  @ /!gLRE\L Microsoft-Windows-Kernel-GeneralOצ]System xLhRE^RJEH**Hj SUE VP&  @ /!j SUE\L Microsoft-Windows-Kernel-GeneralOצ]System xL`?SUEwREeH**H'VE VP&  @ /!'VE\L Microsoft-Windows-Kernel-GeneralOצ]System xL+'VEvUEH**Hè^E VP&  @ /!è^E\L Microsoft-Windows-Kernel-GeneralOצ]System xL%è^EBKVEH**Ht*gE VP&  @ /!t*gE\L Microsoft-Windows-Kernel-GeneralOצ]System xL0*gEv^EsH**HS|}lE VP&  @ /!S|}lE\L Microsoft-Windows-Kernel-GeneralOצ]System xLw|}lE MgEH**H4lE VP&  @ /!4lE\L Microsoft-Windows-Kernel-GeneralOצ]System xL!5lEDlEH**HPCuE VP&  @ /!PCuE\L Microsoft-Windows-Kernel-GeneralOצ]System xL@mCuEnlECH**HYxE VP&  @ /!YxE\L Microsoft-Windows-Kernel-GeneralOצ]System xL@ԩxE푰guEH**PRܦxE ޑ&" !RܦxE  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**MxE VP&  8 !@MxE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**PaxE ޑ&" ! `axE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `rP**(xE VP&  8 !@(xE# L$Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 4win10.ipv6.microsoft.com.nC _**P6xE ޑ&" !6xE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0oP**H!E VP&  @ /!!E#\L Microsoft-Windows-Kernel-GeneralOצ]System xLEioxEH**PGE ޑ&" ! `GE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**9 E VP&  8 !@9 E#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadMicr**_ldap._tcp.dc._msdcs.WORKGROUP2 **Pj駇E ޑ&" !j駇E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0eP**P?{E ޑ&" ! `?{Ep% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**sˇE VP&  8 !@sˇE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadD**P,6 E ޑ&" !,6 Ep% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P{pRE ޑ&" ! `{pRE< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P** uE VP&  8 !@ uE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad$**PZE ޑ&" !ZE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P5*]E ޑ&" ! `5*]E< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `CP**/_E VP&  8 !@/_E#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 4win10.ipv6.microsoft.com.**!aE VP&  8 !@!aE#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**P)fE ޑ&" !)fE< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**Pj&iE ޑ&" ! `j&iEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**wnE VP&  8 !@wnE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**PT:E ޑ&" !T:E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0oP**Py;=E ޑ&" ! `y;=E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**YBE VP&  8 !@YBE&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**PO>TgE ޑ&" !O>TgE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PpjE ޑ&" ! `pjEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**̃nE VP&  8 !@̃nE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**E VP&  8 !@E# (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u &beacon.dropbox.com**P6 WE ޑ&" !6 WEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 P**P[1ZE ޑ&" ! `[1ZEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**y^E VP&  8 !@y^E# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadlien**P4E ޑ&" !4E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PiE ޑ&" ! `iEd w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**EnE VP&  8 !@EnE&_ (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 4win10.ipv6.microsoft.com.** E VP&  8 !@ E&_ (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u Hgeover-prod.do.dsp.mp.microsoft.com** _E VP&  8 !@ _E&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 2detectportal.firefox.com**P mE ޑ&" ! mE  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PE ޑ&" ! `E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**E VP&  8 !@E# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**P_ldap._tcp.dc._msdcs.WORKGROUPA**P+ϒE ޑ&" !+ϒE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P9ҒE ޑ&" ! `9ҒE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**L֒E VP&  8 !@L֒E&_ xMicrosoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadMic**h Ąx  fF !}Ąx  w)Cp$PF46982160480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189(3Brh**P PE ޑ&" !PE&  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**H x VP&  @ /!x&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL/xrĂEfH**H Xx VP&  @ /!Xx&_ Microsoft-Windows-Kernel-GeneralOצ]System xL˪x˪xH**P ބx ޑ&" ! `ބx  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**x =v=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@x w)Cp$00@ **1bx =v M!1bx w)Cp$(( W**tx VP& @ !tx`[Microsoft-Windows-Kernel-GeneralOצ]System $3-$3]SW=vA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat_**8\Jx VP& @  !\Jx[Microsoft-Windows-Kernel-GeneralOצ]System $3-p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat5]D8**nx VP&  8 !@nx Microsoft-Windows-DNS-Clientn~Ix=MSystem  u >_ldap._tcp.dc._msdcs.WORKGROUP-W**@Aӆx VP& @ !Aӆx&_( [Microsoft-Windows-Kernel-GeneralOצ]System $3-u\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat!@**pax >^W !@axPH[ PzGZ *"SysmonC:\Windows\Sysmon.exeuser mode serviceauto startLocalSystemp**hwx >^W !@wxPH[ PzGZ0$SysmonDrvC:\Windows\SysmonDrv.syskernel mode driverboot starth**hmx VP&  > O!@mx&_t"Microsoft-Windows-FilterManagercIİSystem /s/TQMA-= FinalStatus A;-=DeviceVersionMajor A;-=DeviceVersionMinor A7)=DeviceNameLength A+= DeviceName A+= DeviceTime A5'=ExtraInfoLength A5'=ExtraInfoString A'=FilterID   SysmonDrvS${ "flags" : "0x00000000" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000000" , "instances" : [["385201","0x00000000"]] } ̕xh**x VP&  J ! , xPW(3%Y(3,Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA j***x VP&  J ! + xPW(3%Y(3"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA jic**x VP&  J ! xPW(3%Y(3"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC WUDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA jCCpe,w** Ex >^W  g!@ExP PzGZ$MpKsle59912ebC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1DACE389-66DD-4BF8-B3B0-32CD9F3FF16B}\MpKsle59912eb.syskernel mode driversystem start  **Lx VP&  @ !LxdMicrosoft-Windows-Kernel-GeneralOצ]System $3-X,\SystemRoot\System32\Config\RegBack\SECURITYgetwo**P x VP&  < 8!% x&_HdMicrosoft-Windows-Time-ServiceSNʦSystem fx-sfx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123)P**x VP&  @ !x&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3-X,\SystemRoot\System32\Config\RegBack\SOFTWAREu3@ **pqKx VP&  J G! + qKx&_"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PWindows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - October 2017 (KB890830)L6f!p**oinx VP&  J ! (oinx&_"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem h]kh]k8bQ WOb"A)= errorCode A-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid `$Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - October 2017 (KB890830)L6f!CCpe,w** x VP&  @ }!x&_d Microsoft-Windows-Kernel-GeneralOצ]System $3-T*\SystemRoot\System32\Config\RegBack\SYSTEM@**!:x VP&  @ !:x&_d!Microsoft-Windows-Kernel-GeneralOצ]System $3-V+\SystemRoot\System32\Config\RegBack\DEFAULTW&**"x VP&  @ w!x&_d"Microsoft-Windows-Kernel-GeneralOצ]System $3-N'\SystemRoot\System32\Config\RegBack\SAMN**H# Lx VP&  < 2!# LxH@#Microsoft-Windows-Time-ServiceSNʦSystem (sv(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123)oH**H$&Lx VP&  @ /!&LxH $Microsoft-Windows-Kernel-GeneralOצ]System xL`Lx MxH@ /!4D&_\L Microsoft-Windows-Kernel-GeneralOצ]System xLP2DED@HXSystem ElfChnk%Y%Yu8v3 ԖX9*=C9f8?7M9j$ =5&A DL|8dhG**x%;ox VP&VPaY{TAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannelBF;nComputerDESKTOP-2KGM189AB.SecurityfLUserID ! @ !;ox %[Microsoft-Windows-Kernel-GeneralOצ]System iC^iC^sZ * !BinaryPF47349260480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189ހ**-NI x ޑ ޑlL-W\ֲjDAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA&= e1iexpressAz    fA   System(FDESKTOP-2KGM189A  ! !NI x#- w)CdX,Intel(R) 82574L Gigabit Network Connection,0**.HԟI~ VP&  @ !HԟI~#\L .Microsoft-Windows-Kernel-GeneralOצ]System xL$xLWְ2_͔A%*=NewTime A%*=OldTime A#*=Reason ӟI~< x**P/GI~ ޑ  ! `GI~ / w)CdX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**0,I~ =&=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@,I~0 0 w)Cd00@do**1,I~ =& M!,I~t1 w)Cd((**@29I~ VP& @ !9I~2[Microsoft-Windows-Kernel-GeneralOצ]System $3 u\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.datb@**83,I~ VP& @  !,I~T  3[Microsoft-Windows-Kernel-GeneralOצ]System $3 p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat1VP&8**4vI~ VP&  8 !@vI~ 4Microsoft-Windows-DNS-Clientn~Ix=MSystem   wpadVP&**5I~ VP& @ !I~ `%5[Microsoft-Windows-Kernel-GeneralOצ]System $3 c\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat ** 6)I~ VP& @ !)I~$6[Microsoft-Windows-Kernel-GeneralOצ]System $3 f\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat' -D **7-qaJ~ ϔ 5&ϔ )^EXAMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Microsoft-Windows-EventlogX&{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}Az      ? fA   AFFmAF System(FDESKTOP-2KGM189A  $7m5DUserData! !hh-qaJ~$7[ 3|83ψvP5^7{qAe8ALogFileClearedj;http://manifests.microsoft.com/win/2004/08/windows/eventlog2X9›SubjectUserName 69F^SubjectDomainName   (9' BackupPath HtonyDESKTOP-2KGM189Microsoft-Windows-Sysmon/Operational**X8oJ~ ϔ 5 !hhoJ~$8[ 3|8HtonyDESKTOP-2KGM189Microsoft-Windows-Sysmon/Operational**X**9` K~ VP&  J ! , ` K~PW(3W Z(39Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  = zPLX A-*= updateTitle A+*= updateGuid A?*1=updateRevisionNumber Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.809.0)` ~@K/N**:ȭ` K~ VP&  J ! + ȭ` K~PW(3W Z(3:Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  =Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.809.0)` ~@K/N>** ;~K~ VP&  J ! ~K~&_;Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC AnC o]kA-*= updateTitle A+*= updateGuid A?*1=updateRevisionNumber A-*= serviceGuid Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.809.0)` ~@K/NCCpe,w **<hK~ >D>Qd_)`:AMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Service Control ManagerFX&{555908d1-a6d7-4695-8e1e-26931d2012f4}CService Control ManagerAz      ? fA   AFFmAF System(FDESKTOP-2KGM189A  !  !@hK~P< PzGhGPzGe\UA-*= ServiceName A)*= ImagePath A-*= ServiceType A)*= StartType A-*= AccountName $MpKsl34afefd5C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9F21B1C2-64B5-46BA-B8AD-3748F06F0E0B}\MpKsl34afefd5.syskernel mode driversystem start A**=LK~ VP&  8 !@LK~ #=Microsoft-Windows-DNS-Clientn~Ix=MSystem  :200.177.17.104.in-addr.arpa.**h>7|K~ VP&  > O!@7|K~&_0>Microsoft-Windows-FilterManagercIİSystem /L/TQMA-*= FinalStatus A;*-=DeviceVersionMajor A;*-=DeviceVersionMinor A7*)=DeviceNameLength A+*= DeviceName A+*= DeviceTime A5*'=ExtraInfoLength A5*'=ExtraInfoString A'*=FilterID   PROCMON23ȣ3*{ "flags" : "0x00000010" , "registration_version" : "0x00000200" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000003" , "instances" : [["385200","0x00000000"]] } 8|K~h**h?,<_8   !},<_8? w)CdPF47454960480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189indoh**P@pL~ ޑ  !pL~#@ w)CdX,Intel(R) 82574L Gigabit Network Connection,0WP**HAuD8 VP&  @ /!uD8&_\L AMicrosoft-Windows-Kernel-GeneralOצ]System xL$D8=L~sH**PB8 ޑ  ! `8"B w)CdX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**C<9 =& U!@<9pC w)Cd00@1**D<9 =& M!<9#D w)Cd((**E5b> VP&  8 !@5b>&_ EMicrosoft-Windows-DNS-Clientn~Ix=MSystem  >_ldap._tcp.dc._msdcs.WORKGROUP**hF"   !}"F w)CdPF47456360480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189!h**PGt4@ ޑ  !t4@ G w)CdX,Intel(R) 82574L Gigabit Network Connection,0P**HH9" VP&  @ /!9"#\L HMicrosoft-Windows-Kernel-GeneralOצ]System xL$ ""@H**HI" VP&  @ /!"#IMicrosoft-Windows-Kernel-GeneralOצ]System xL$t"t"H**PJ&" ޑ  ! `&" J w)CdX,Intel(R) 82574L Gigabit Network Connection,0 ` `P**K" =& U!@" K w)Cd00@ys**L" =& M!" L w)Cd((ic**Mm;" VP&  8 !@m;"&_ 'MMicrosoft-Windows-DNS-Clientn~Ix=MSystem   wpad+'VE**NN# VP&  @ {!N#& NMicrosoft-Windows-Kernel-GeneralOצ]System iC^R)\??\C:\Windows\System32\config\COMPONENTS**Or# VP&  @ !r#&8 OMicrosoft-Windows-Kernel-GeneralOצ]System $3 h4\??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DATL **PA # >D  !oA #P$P ڝ^jڝ^xW &vA.wkA#*=param1 A#*=param2   <Interactive Services Detection%%1UI0Detectm **(QT # >D }!oT #P$Q ڝ^j<Interactive Services Detection%%1UI0Detectra(**(R޷ # >D }!o޷ #PR ڝ^j<Interactive Services Detection%%1UI0Detectdo(**(Sg # >D }!og #PS ڝ^j<Interactive Services Detection%%1UI0Detect(**(TS # >D }!oS #PT ڝ^j<Interactive Services Detection%%1UI0Detect(**(U # >D }!o #PU ڝ^j<Interactive Services Detection%%1UI0Detect(**(V # >D }!o #PV ڝ^j<Interactive Services Detection%%1UI0Detect,(**(Wx # >D }!ox #PW ڝ^j<Interactive Services Detection%%1UI0Detect(**(X # >D }!o #PX ڝ^j<Interactive Services Detection%%1UI0Detect(**(Yd # >D }!od #PY ڝ^j<Interactive Services Detection%%1UI0Detect(!E VP&  @ /!!E#\L Microsoft-Windows-Kernel-GeneralOצ]System xLEioxEH**PGE ޑ&" ! `GE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `eP**9 E VP&  8 !@9 E#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadMicr**_ldap._tcp.dc._msdcs.WORKGROUP2 **Pj駇E ޑ&" !j駇E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0eP**P?{E ޑ&" ! `?{Ep% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**sˇE VP&  8 !@sˇE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadD**P,6 E ޑ&" !,6 Ep% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P{pRE ޑ&" ! `{pRE< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P** uE VP&  8 !@ uE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad$**PZE ޑ&" !ZE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P5*]E ޑ&" ! `5*]E< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `CP**/_E VP&  8 !@/_E#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 4win10.ipv6.microsoft.com.**!aE VP&  8 !@!aE#  Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**P)fE ޑ&" !)fE< w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**Pj&iE ޑ&" ! `j&iEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**wnE VP&  8 !@wnE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**PT:E ޑ&" !T:E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0oP**Py;=E ޑ&" ! `y;=E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**YBE VP&  8 !@YBE&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**PO>TgE ޑ&" !O>TgE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PpjE ޑ&" ! `pjEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**̃nE VP&  8 !@̃nE# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**E VP&  8 !@E# (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u &beacon.dropbox.com**P6 WE ޑ&" !6 WEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 P**P[1ZE ޑ&" ! `[1ZEp% w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**y^E VP&  8 !@y^E# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadlien**P4E ޑ&" !4E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PiE ޑ&" ! `iEd w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**EnE VP&  8 !@EnE&_ (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 4win10.ipv6.microsoft.com.** E VP&  8 !@ E&_ (Microsoft-Windows-DNS-Clientn~Ix=MSystem  u Hgeover-prod.do.dsp.mp.microsoft.com** _E VP&  8 !@ _E&_ Microsoft-Windows-DNS-Clientn~Ix=MSystem  u 2detectportal.firefox.com**P mE ޑ&" ! mE  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**PE ޑ&" ! `E  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**E VP&  8 !@E# Microsoft-Windows-DNS-Clientn~Ix=MSystem  u  wpad**P_ldap._tcp.dc._msdcs.WORKGROUPA**P+ϒE ޑ&" !+ϒE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**P9ҒE ޑ&" ! `9ҒE w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**L֒E VP&  8 !@L֒E&_ xMicrosoft-Windows-DNS-Clientn~Ix=MSystem  u  wpadMic**h Ąx  fF !}Ąx  w)Cp$PF46982160480 Pacific Standard TimeF1.10Windows 10 Pro10.0.15063 Build 15063 Multiprocessor Free15063.rs2_release.170317-18345965cd44Not AvailableNot Available942048409DESKTOP-2KGM189(3Brh**P PE ޑ&" !PE&  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0P**H x VP&  @ /!x&_\L Microsoft-Windows-Kernel-GeneralOצ]System xL/xrĂEfH**H Xx VP&  @ /!Xx&_ Microsoft-Windows-Kernel-GeneralOצ]System xL˪x˪xH**P ބx ޑ&" ! `ބx  w)Cp$X,Intel(R) 82574L Gigabit Network Connection,0 ` `P**x =v=\C..7KAMsj5http://schemas.microsoft.com/win/2004/08/events/event A=BTHUSBAz    fA   System(FDESKTOP-2KGM189A  ! U!@x w)Cp$00@ **1bx =v M!1bx w)Cp$(( W**tx VP& @ !tx`[Microsoft-Windows-Kernel-GeneralOצ]System $3-$3]SW=vA3%=HiveNameLength A'=HiveName A-= KeysUpdated A+= DirtyPages d\??\C:\Users\tony\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat_**8\Jx VP& @  !\Jx[Microsoft-Windows-Kernel-GeneralOצ]System $3-p\??\C:\Users\tony\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat5]D8**nx VP&  8 !@nx Microsoft-Windows-DNS-Clientn~Ix=MSystem  u >_ldap._tcp.dc._msdcs.WORKGROUP-W**@Aӆx VP& @ !Aӆx&_( [Microsoft-Windows-Kernel-GeneralOצ]System $3-u\??\C:\Users\tony\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat!@**pax >^W !@axPH[ PzGZ *"SysmonC:\Windows\Sysmon.exeuser mode serviceauto startLocalSystemp**hwx >^W !@wxPH[ PzGZ0$SysmonDrvC:\Windows\SysmonDrv.syskernel mode driverboot starth**hmx VP&  > O!@mx&_t"Microsoft-Windows-FilterManagercIİSystem /s/TQMA-= FinalStatus A;-=DeviceVersionMajor A;-=DeviceVersionMinor A7)=DeviceNameLength A+= DeviceName A+= DeviceTime A5'=ExtraInfoLength A5'=ExtraInfoString A'=FilterID   SysmonDrvS${ "flags" : "0x00000000" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "(null)" , "supportedFeatures": "0x00000000" , "instances" : [["385201","0x00000000"]] } ̕xh**x VP&  J ! , xPW(3%Y(3,Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA j***x VP&  J ! + xPW(3%Y(3"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA jic**x VP&  J ! xPW(3%Y(3"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem nC WUDefinition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.464.0) HEA jCCpe,w** Ex >^W  g!@ExP PzGZ$MpKsle59912ebC:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1DACE389-66DD-4BF8-B3B0-32CD9F3FF16B}\MpKsle59912eb.syskernel mode driversystem start  **Lx VP&  @ !LxdMicrosoft-Windows-Kernel-GeneralOצ]System $3-X,\SystemRoot\System32\Config\RegBack\SECURITYgetwo**P x VP&  < 8!% x&_HdMicrosoft-Windows-Time-ServiceSNʦSystem fx-sfx-7z\o |'eAKAG=TMP_EVENT_TIME_SOURCE_REACHABLEA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123)P**x VP&  @ !x&_dMicrosoft-Windows-Kernel-GeneralOצ]System $3-X,\SystemRoot\System32\Config\RegBack\SOFTWAREu3@ **pqKx VP&  J G! + qKx&_"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem  PWindows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - October 2017 (KB890830)L6f!p**oinx VP&  J ! (oinx&_"Microsoft-Windows-WindowsUpdateClientTZGJ?@TXSystem h]kh]k8bQ WOb"A)= errorCode A-= updateTitle A+= updateGuid A?1=updateRevisionNumber A-= serviceGuid `$Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - October 2017 (KB890830)L6f!CCpe,w** x VP&  @ }!x&_d Microsoft-Windows-Kernel-GeneralOצ]System $3-T*\SystemRoot\System32\Config\RegBack\SYSTEM@**!:x VP&  @ !:x&_d!Microsoft-Windows-Kernel-GeneralOצ]System $3-V+\SystemRoot\System32\Config\RegBack\DEFAULTW&**"x VP&  @ w!x&_d"Microsoft-Windows-Kernel-GeneralOצ]System $3-N'\SystemRoot\System32\Config\RegBack\SAMN**H# Lx VP&  < 2!# LxH@#Microsoft-Windows-Time-ServiceSNʦSystem (sv(sv]j} # A}A=TMP_EVENT_TIME_SOURCE_CHOSENA+= TimeSource ~time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123)oH**H$&Lx VP&  @ /!&LxH $Microsoft-Windows-Kernel-GeneralOצ]System xL`Lx MxH@ /! VP& @ ndows-Kernel-GeneralOצ]System xLP2DED@HXSystem