????

Your IP : 18.119.29.162


Current Path : C:/Windows/System32/
Upload File :
Current File : C:/Windows/System32/microsoft-windows-kernel-pnp-events.dll

MZ����@���	�!�L�!This program cannot be run in DOS mode.

$��<߱�R���R���R�U�����R�U�P���R�Rich��R�PEd��%)��" ��


���`A ���8!T.rdata�@@.rsrc�� � @@�%)�
TTT�%)�$���%)���T.rdataT|.rdata$zzzdbg .rsrc$01!x�.rsrc$02 V��p�pr.J}g�{�OL�3�����%)��(���@�X�p�����	�	�	����H%R�!8
WEVT_TEMPLATEMUI(4VS_VERSION_INFO��
|O
|O?�StringFileInfob040904B0LCompanyNameMicrosoft Corporation�.FileDescriptionMicrosoft-Windows-Kernel-Pnp-Events Resourcesh$FileVersion10.0.20348.1 (WinBuild.160101.0800)p(InternalNamemicrosoft-windows-kernel-pnp-events.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.x(OriginalFilenamemicrosoft-windows-kernel-pnp-events.dllj%ProductNameMicrosoft� Windows� Operating System>
ProductVersion10.0.20348.1DVarFileInfo$Translation	�CRIMP�9Z �P}H���1�)98� ����M��K"�Êר�WEVTp��	��
X���������CHANp�0�����h���<��	�System\Microsoft-Windows-Kernel-PnP/Configuration`Microsoft-Windows-Kernel-PnP/Boot Diagnostic|Microsoft-Windows-Kernel-PnP/Device Enumeration DiagnosticpMicrosoft-Windows-Kernel-PnP/Configuration DiagnosticdMicrosoft-Windows-Kernel-PnP/Driver Diagnostic`Microsoft-Windows-Kernel-PnP/Driver WatchdogdMicrosoft-Windows-Kernel-PnP/Device ManagementMAPS�xLVMAP4T����VMAP,(���VMAPl��	�
���
����	�
�DPnp:DpReplace.ExtendedStatusMap,Pnp:Elam.ElamStatus@Pnp:Elam.ImageClassificationTTBLĆ9TEMPH������`U,�dh��}b���D�	EventDataA��E�oData-K�Name
OSLoaderStart

A��A�oData)K�NameOSLoaderEnd



�

� OSLoaderStartOSLoaderEndTEMP��	`���މ�P�
�g(������D�	EventDataA��E�oData-K�Name
OSLoaderStart

A��A�oData)K�NameOSLoaderEnd

A��G�oData/K�NamePreloadEndTime

A��O�oData7K�NameTcbLoaderStartTime

A��O�oData7K�NameLoadHypervisorTime

A��S�oData;K�NameLaunchHypervisorTime

A��A�oData)K�NameLoadVsmTime

A��E�oData-K�Name
LaunchVsmTime



T


t


�


�


�




<

X OSLoaderStartOSLoaderEnd$PreloadEndTime,TcbLoaderStartTime,LoadHypervisorTime0LaunchHypervisorTimeLoadVsmTime LaunchVsmTimeTEMP�

���fY�(�����^D�	EventDataA��E�oData-K�Name
OSLoaderStart

A��A�oData)K�NameOSLoaderEnd

A��G�oData/K�NamePreloadEndTime

A��O�oData7K�NameTcbLoaderStartTime

A��O�oData7K�NameLoadHypervisorTime

A��S�oData;K�NameLaunchHypervisorTime

A��A�oData)K�NameLoadVsmTime

A��E�oData-K�Name
LaunchVsmTime

A��_�oDataGK�NameExecuteTransitionStartTime

A��[�oDataCK�NameExecuteTransitionEndTime
	


�

�



4

`

�

�

�

�

4 OSLoaderStartOSLoaderEnd$PreloadEndTime,TcbLoaderStartTime,LoadHypervisorTime0LaunchHypervisorTimeLoadVsmTime LaunchVsmTime<ExecuteTransitionStartTime8ExecuteTransitionEndTimeTEMP���?c�%Q����x��`D�	EventDataA��?�oData'K�Name
ElamStatus
LElamStatusTEMPt(�h�Qe�M������D�	EventDataA��S�oData;K�NameElamDriverNameLength
A��G�oData/K�NameElamDriverName
P�0ElamDriverNameLength$ElamDriverNameTEMP����(�9�^y�1����D�	EventDataA��G�oData/K�NameClassification
A��7�oDataK�NamePolicy
A��7�oDataK�NameResult
�0$ClassificationPolicyResultTEMPt</�{�R����b{|���D�	EventDataA��S�oData;K�NameDeviceInstanceLength
A��G�oData/K�NameDeviceInstance
d�0DeviceInstanceLength$DeviceInstanceTEMP��Ɉ�G�̈^����`���D�	EventDataA��S�oData;K�NameDeviceInstanceLength
A��G�oData/K�NameDeviceInstance
A��7�oDataK�NameStatus
(X|0DeviceInstanceLength$DeviceInstanceStatusTEMPTx0f���S*Y>Б�����D�	EventDataA��K�oData3K�NameDriverNameLength
A��?�oData'K�Name
DriverName
��(DriverNameLengthDriverNameTEMP��(��S[V��3\������D�	EventDataA��K�oData3K�NameDriverNameLength
A��?�oData'K�Name
DriverName
A��7�oDataK�NameStatus
Dl�(DriverNameLengthDriverNameStatusTEMP<���EM�WD^	X1s(����D�	EventDataA��S�oData;K�NameDeviceInstanceLength
A��G�oData/K�NameDeviceInstance
A��7�oDataK�NameStatus
A��;�oData#K�NameVetoType
A��G�oData/K�NameVetoNameLength
A��;�oData#K�NameVetoName
Lp���0DeviceInstanceLength$DeviceInstanceStatusVetoType$VetoNameLengthVetoNameTEMP(� ��%P]�X�8:)]��	���D�	EventDataA��M�oData5K�NameServiceNameLength
A��A�oData)K�NameServiceName
A��7�oDataK�NameStatus
A��K�oData3K�NameDriverNameLength
A��?�oData'K�Name
DriverName
A��9�oData!K�NameVersion
P!x!�!�!�!�!(ServiceNameLengthServiceNameStatus(DriverNameLengthDriverNameVersionTEMP($g$=*���^ߥ/-�G����D�	EventDataA��K�oData3K�NameDriverNameLength
A��?�oData'K�Name
DriverName
A��7�oDataK�NameStatus
A��M�oData5K�NameFailureNameLength
A��A�oData)K�NameFailureName
A��9�oData!K�NameVersion
x$�$�$�$�$%(DriverNameLengthDriverNameStatus(FailureNameLengthFailureNameVersionTEMP�'TPtO'�K\#�	�����D�	EventDataA��=�oData%K�Name	ProcessId
A��M�oData5K�NameProcessNameLength
A��A�oData)K�NameProcessName
A��S�oData;K�NameDeviceInstanceLength
A��G�oData/K�NameDeviceInstance
d'|'�'�'�'ProcessId(ProcessNameLengthProcessName0DeviceInstanceLength$DeviceInstanceTEMP��*i:kޖ��S8�<��l��>D�	EventDataA��=�oData%K�Name	ProcessId
A��M�oData5K�NameProcessNameLength
A��A�oData)K�NameProcessName
A��S�oData;K�NameDeviceInstanceLength
A��G�oData/K�NameDeviceInstance
A��M�oData5K�NameCommandLineLength
A��A�oData)K�NameCommandLine
+,+T+p+�+�+�+ProcessId(ProcessNameLengthProcessName0DeviceInstanceLength$DeviceInstance(CommandLineLengthCommandLineTEMP��,*�W�(�_	�$�W�m��pD�	EventDataA��O�oData7K�NameBlockedDriverEntry
�,,BlockedDriverEntryTEMPDd.�͟�,�Vo�9��{���BD�	EventDataA��9�oData!K�NameSqmType
A��G�oData/K�NameSqmSessionGuid
A��5�oDataK�NameSqmID
A��W�oData?K�NameSqmDWORDDatapointValue
�.�.�.�.SqmType$SqmSessionGuidSqmID4SqmDWORDDatapointValueTEMPD�0+������_S�������DD�	EventDataA��9�oData!K�NameSqmType
A��G�oData/K�NameSqmSessionGuid
A��5�oDataK�NameSqmID
A��Y�oDataAK�NameSqmStringDatapointValue
�0101@1SqmType$SqmSessionGuidSqmID4SqmStringDatapointValueTEMP`<3��Ǎ��Y<��������D�	EventDataA��9�oData!K�NameSqmType
A��G�oData/K�NameSqmSessionGuid
A��5�oDataK�NameSqmID
A��O�oData7K�NameSqmStreamRowLength
A��QZ�ComplexData+K�NameSqmStreamRow
��3�34$4P4p4�4�4SqmType$SqmSessionGuidSqmID,SqmStreamRowLength SqmStreamRow SqmTypeEntry SqmDWORDEntry$SqmStringEntryTEMP��6ZK�#E�^_!���M�����D�	EventDataA��9�oData!K�NameSqmType
A��G�oData/K�NameSqmSessionGuid
A��7�oDataK�NameSqmSid
A��Q�oData9K�NameSqmWindowsSessionId
A��I�oData1K�NameSqmSessionFlags
�6747H7t7SqmType$SqmSessionGuidSqmSid,SqmWindowsSessionId$SqmSessionFlagsTEMP<t8[g4�lR��M��)l����D�	EventDataA��9�oData!K�NameSqmType
A��G�oData/K�NameSqmSessionGuid
�8�8SqmType$SqmSessionGuidTEMP4�9��2���\�a���)���D�	EventDataA��?�oData'K�Name
TargetPath
A��=�oData%K�Name	SparePath
�9�9TargetPathSparePathTEMP`;l���'�6Z��X�W��$D�	EventDataA��?�oData'K�Name
TargetPath
A��=�oData%K�Name	SparePath
A��7�oDataK�NameStatus
A��;�oData#K�NameLocation
�;�;�;�;TargetPathSparePathStatusLocationTEMP��=�6,kF
FS��z
�����rD�	EventDataA��?�oData'K�Name
TargetPath
A��=�oData%K�Name	SparePath
A��7�oDataK�NameStatus
A��;�oData#K�NameLocation
A��G�oData/K�NameExtendedStatus
>8>P>d>x|>TargetPathSparePathStatusLocation$ExtendedStatusTEMP�
dD!6Yu�0W@M³=K����D�	EventDataA��?�oData'K�Name
TargetPath
A��G�oData/K�NameTargetAffinity
A��S�oData;K�NameTargetProcessorCount
A��M�oData5K�NameTargetMemoryCount
A��K�oData3K�NameTargetMemorySize
A��=�oData%K�Name	SparePath
A��Q�oData9K�NameSpareProcessorCount
A��K�oData3K�NameSpareMemoryCount
A��I�oData1K�NameSpareMemorySize
A��=�oData%K�Name	TimeTotal
	A��E�oData-K�Name
TimeToQuiesce
A��C�oData+K�NameTimeQuiesced
A��?�oData'K�Name
TimeToWake
A��YZ�ComplexData3K�NameTargetProcessors

�A��]Z�ComplexData7K�NameTargetMemoryRanges
�A��WZ�ComplexData1K�NameSpareProcessors
�A��[Z�ComplexData5K�NameSpareMemoryRanges
�0FLFpF�F�F�FG4G\G�G�G�G�G�GHHHlH�H�H�HI IPITargetPath$TargetAffinity0TargetProcessorCount(TargetMemoryCount(TargetMemorySizeSparePath,SpareProcessorCount(SpareMemoryCount$SpareMemorySizeTimeTotal TimeToQuiesce TimeQuiescedTimeToWake(TargetProcessors,TargetMemoryRanges$SpareProcessors(SpareMemoryRanges TargetApicId0TargetPhysicalAddress TargetLengthSpareApicId0SparePhysicalAddressSpareLengthTEMPT�M��Z�F�%Zl�#���<D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��?�oData'K�Name
DriverName
A��=�oData%K�Name	ClassGuid
A��?�oData'K�Name
DriverDate
A��E�oData-K�Name
DriverVersion
A��G�oData/K�NameDriverProvider
A��A�oData)K�NameDriverInbox

A��E�oData-K�Name
DriverSection
A��?�oData'K�Name
DriverRank
A��K�oData3K�NameMatchingDeviceId
	A��K�oData3K�NameOutrankedDrivers
A��E�oData-K�Name
DeviceUpdated

A��7�oDataK�NameStatus
A��W�oData?K�NameParentDeviceInstanceId

�NO8OPOlO�O

�O�O�OP0P

XPxP�P(DeviceInstanceIdDriverNameClassGuidDriverDate DriverVersion$DriverProviderDriverInbox DriverSectionDriverRank(MatchingDeviceId(OutrankedDrivers DeviceUpdatedStatus4ParentDeviceInstanceIdTEMPDS+�jf��P@��U�	��PD�	EventDataA��K�oData3K�NameDeviceInstanceId
A��?�oData'K�Name
DriverName
A��=�oData%K�Name	ClassGuid
A��A�oData)K�NameServiceName
A��C�oData+K�NameLowerFilters
A��C�oData+K�NameUpperFilters
A��9�oData!K�NameProblem
A��7�oDataK�NameStatus
�ST(T@T\T|T�T�T(DeviceInstanceIdDriverNameClassGuidServiceName LowerFilters UpperFiltersProblemStatusTEMP(Vt(~�i��SO_�r���.D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��=�oData%K�Name	ClassGuid
A��9�oData!K�NameProblem
A��7�oDataK�NameStatus
xV�V�V�V(DeviceInstanceIdClassGuidProblemStatusTEMP�4Yq��=�9�S `�ϺNA���D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��S�oData;K�NameLastDeviceInstanceId
A��=�oData%K�Name	ClassGuid
A��C�oData+K�NameLocationPath
A��E�oData-K�Name
MigrationRank
A��9�oData!K�NamePresent

A��7�oDataK�NameStatus
�Y�YZ0ZPZ

pZ�Z(DeviceInstanceId0LastDeviceInstanceIdClassGuid LocationPath MigrationRankPresentStatusTEMP��[�,�,i�U�p������D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��;�oData#K�NameVetoType
A��;�oData#K�NameVetoName
�[ \8\(DeviceInstanceIdVetoTypeVetoNameTEMP�

�_HJ�(�JRN)�\{�����TD�	EventDataA��K�oData3K�NameDeviceInstanceId
A��A�oData)K�NameServiceName
A��A�oData)K�NameDeviceCount
A��5�oDataK�NamePhase
A��U�oData=K�NameSubtreeRootInstanceId
A��Q�oData9K�NameSubtreeIncludesRoot

A��m�oDataUK�Name!RebalanceDueToDynamicPartitioning

A��I�oData1K�NameRebalanceReason
A��S�oData;K�NameConflictResourceType
A��C�oData+K�NameDurationInMs
	
�`�`�`aa

@a

la�a�a

b(DeviceInstanceIdServiceNameDeviceCountPhase0SubtreeRootInstanceId,SubtreeIncludesRootHRebalanceDueToDynamicPartitioning$RebalanceReason0ConflictResourceType DurationInMsTEMPt

�f�Y[nIW�~ ��07��BD�	EventDataA��K�oData3K�NameDeviceInstanceId
A��A�oData)K�NameServiceName
A��A�oData)K�NameDeviceCount
A��5�oDataK�NamePhase
A��U�oData=K�NameSubtreeRootInstanceId
A��Q�oData9K�NameSubtreeIncludesRoot

A��m�oDataUK�Name!RebalanceDueToDynamicPartitioning

A��I�oData1K�NameRebalanceReason
A��S�oData;K�NameConflictResourceType
A��K�oData3K�NameRebalanceFailure
	A��?�oData'K�Name
VetoReason
A��O�oData7K�NameVetoNodeInstanceId
A��C�oData+K�NameDurationInMs

�g�g�ghh

Dh

ph�h�hi4iPi

|i(DeviceInstanceIdServiceNameDeviceCountPhase0SubtreeRootInstanceId,SubtreeIncludesRootHRebalanceDueToDynamicPartitioning$RebalanceReason0ConflictResourceType(RebalanceFailureVetoReason,VetoNodeInstanceId DurationInMsTEMP<xjŦW�2BU�Cmʇ�J���D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��5�oDataK�NameFlags
�j�j(DeviceInstanceIdFlagsTEMPT�k[��"�NMU�y"�>=h����D�	EventDataA��K�oData3K�NameDeviceInstanceId
A��A�oData)K�NameDeviceCount
�kl(DeviceInstanceIdDeviceCountTEMP��l[��N@[��A��Ǻ��lD�	EventDataA��K�oData3K�NameDeviceInstanceId
�l(DeviceInstanceIdTEMP�		�o�C6���Q�l�[G����D�	EventDataA��C�oData+K�NameQueryAddress
A��=�oData%K�Name	ProcessId
A��?�oData'K�Name
ObjectType
A��=�oData%K�Name	QueryType
A��;�oData#K�NameObjectId
A��?�oData'K�Name
QueryFlags
A��O�oData7K�NamePreferredLanguages
A��Q�oData9K�NameRequestedProperties
A��K�oData3K�NameFilterExpression
�p�p�pqq0qLqxq�q QueryAddressProcessIdObjectTypeQueryTypeObjectIdQueryFlags,PreferredLanguages,RequestedProperties(FilterExpressionTEMP�dr��Ӕ�~jTQZ�p�¿���dD�	EventDataA��C�oData+K�NameQueryAddress
xr QueryAddressTEMP�0s��Ӕ�~jTQZ�p�¿���dD�	EventDataA��C�oData+K�NameQueryAddress
Ds QueryAddressTEMP��s��Ӕ�~jTQZ�p�¿���dD�	EventDataA��C�oData+K�NameQueryAddress
t QueryAddressTEMP�Hutx�W��]�Rݳ[0�����D�	EventDataA��7�oDataK�NameFilter
A��;�oData#K�NameFilterBy
A��A�oData)K�NameOnlyPresent

�u�u

�uFilterFilterByOnlyPresentTEMP�Xvt34�=E\���J<����XD�	EventDataA��7�oDataK�NameResult
lvResultTEMP��w6���fV��jL����D�	EventDataA��5�oDataK�NameClass
A��7�oDataK�NameDevice
A��A�oData)K�NameOnlyPresent

�w�w

�wClassDeviceOnlyPresentTEMP��xt34�=E\���J<����XD�	EventDataA��7�oDataK�NameResult
�xResultTEMP��y����z�_����9|���D�	EventDataA��Y�oDataAK�NameHardwareConfigurationId
A��7�oDataK�NameDriver
A��=�oData%K�Name	StartType
,z`ztz4HardwareConfigurationIdDriverStartTypeTEMP<h{���!�S����b;����D�	EventDataA��I�oData1K�NameQueryRemoveType
A��7�oDataK�NameDevice
�{�{$QueryRemoveTypeDeviceTEMP�T|���O*R[�i&hf��XD�	EventDataA��7�oDataK�NameDevice
h|DeviceTEMP�}�d�K��X����2��R��`D�	EventDataA��?�oData'K�Name
DeviceNode
$}DeviceNodeTEMP\,~[ҥ1��Z����TE���D�	EventDataA��?�oData'K�Name
DeviceNode
A��O�oData7K�NameDeviceInstancePath
T~p~DeviceNode,DeviceInstancePathTEMPd�=Ք�u^�3x��������D�	EventDataA��5�oDataK�NamePhase
A��7�oDataK�NameDevice
��PhaseDeviceTEMPx��=Ք�u^�3x��������D�	EventDataA��5�oDataK�NamePhase
A��7�oDataK�NameDevice
����PhaseDeviceTEMP<�����ѩ�P�
�zA~�Q���D�	EventDataA��7�oDataK�NameDevice
A��I�oData1K�NameReenumerateType
ȁ܁Device$ReenumerateTypeTEMP,Ԃ����BIIWsV�)����D�	EventDataA��7�oDataK�NameDevice
A��A�oData)K�NameRequestType
���DeviceRequestTypeTEMP�@�� �`$nQ�m'\Y�����D�	EventDataA��7�oDataK�NameDevice
A��A�oData)K�NameRequestType
A��7�oDataK�NameStatus
|�����DeviceRequestTypeStatusTEMP`D�ׯ��|\����T��PD�	EventDataA��A�oData)K�NameServiceType
A��K�oData3K�NameDriverNameLength
A��?�oData'K�Name
DriverName
A��O�oData7K�NameDeviceInstancePath
����؆�ServiceType(DriverNameLengthDriverName,DeviceInstancePathTEMP���$*��Qq�����XD�	EventDataA��7�oDataK�NameStatus
��StatusTEMPDL����1�_!a%�5�}r��BD�	EventDataA��;�oData#K�NameThreadId
A��K�oData3K�NameDeviceInstanceId
A��A�oData)K�NameServiceName
A��E�oData-K�Name
ElapsedTimeMs

����܉

��ThreadId(DeviceInstanceIdServiceName ElapsedTimeMsTEMP@��x�3V�Ww���1��@D�	EventDataA��;�oData#K�NameThreadId
A��K�oData3K�NameDeviceInstanceId
A��?�oData'K�Name
DriverName
A��E�oData-K�Name
ElapsedTimeMs

܋��

8�ThreadId(DeviceInstanceIdDriverName ElapsedTimeMsPRVAPl�Microsoft-Windows-Kernel-PnPOPCOL0�0,�0D�0\�
����x�������������
����Ѝwin:Infowin:Startwin:Stopwin:SuspendQueryStartQueryStop$ProcessingStart$ProcessingStopLEVL�P$�P<�PX�win:Errorwin:Warning(win:InformationalTASK`	$�����|��������������������Ȓ������������������0������P������l������������������������������������<�
����d�����������Ĕ����������$�X����\��������������������� �����#����8�%����d�'������*������-����ܖ0�����3����0�>����\�R����|�T�������������BootStartSystemStartOsLoader4EarlyLaunchAntiMalwareBootInitDriverLoad DriverUnloadDeviceStartDeviceEnumDeviceEjectDriverInit DeviceConfig,SystemStartPnPEnum0SystemStartLegacyEnum(BootDriverReinit4SystemStartDriverReinit,DriverDatabaseLoad0DriverDatabaseUnload0DriverDatabaseLoaded8DevQuery_QueryProcessing$DriverOverride(CfgMgr_DeviceList<CfgMgr_DeviceInterfaceList,CfgMgr_QueryRemove(ProcessNewDevice,ProcessDeviceStart0ProcessDeviceRestartDeviceAdd0ReenumerateDeviceTree0ReenumerateDeviceOnly$ConfigureDevice,GenericDeviceAction DeviceRemoval$AssignResourcesRebalance(WatchdogTriggeredKEYW� ���������� ���� �@����<������\�����x�����������������̙����� �����@����(������<�����X�1t�4��PerformanceBootInitDriverLoad DriverUnloadDeviceStartDeviceEnumDriverInitDeviceEject DeviceConfig$DriverDatabaseDevQueryCfgMgrEnumerationObjectLists(win:ResponseTimewin:SQMEVNT����  �������д���  ��̌���Դ���  �������ش���  ��̌���ܴ���  ������Ď����  ������Ď����  ��x���Ď���� ����0������� ����0̌����� ����l������� ����ľ������ ������������� ������������ ���̌�������  �����������  ���̌������ @������4� ���� @���̌�4�(���� �������P�0���� ����،�P�8���� ���"̌�P�@������"������� ������l�H���� ���،�l�P���� ���̌�l�X������������`������"̌���d�������(%����������(�������� ��������h���� ���̌���p��������4�x�������7�|�������,���������,̌���������,���������,���������,��������0/��������t1�������8������:�����<������>������D������������D،�����������̌������  ����܏���  �̌�܏���  ���������  �̌������ ��������	 	�̌�����

 
����0����
 �̌�0�ĵ������L�ȵ���،�L�̵���̌�L�е������h�Ե���،�h�ص���̌�h�ܵ�����������������̌��������,���, ,���- -����@��lI�����@��lI�����@��lI�����@��lI�����@���P�����@���P�����@���P�����@���T�����@���T�����@��,l�����@���V�����@���V�����@���V�����
� ����m������� �����r��������
� ����ds�������� �����q�����XXX��x��������@����0t���ؐ���@�����ǔ�ؐ���@�����v�������@����x̌�� ���@�����z����(���@�����{̌��,�  � �||���,�0��! �!�@}���,�4��" �"�||̌�,�8��##�#��~���H�<�$#�$��~̌�H�@�%%�%�����d�D�&%�&��̌�d�H�''�'��������L��('�(� �̌���P��**�*�Ā�����T��+*�+�Ā�����X��,*�,�Ā̌���\��--�-��{�����`��.-�.��{�����d��/-�/��{̌���h��000�����ԑl��101�����ԑp��202�,�̌�ԑt��33����������x�43����������|�53�����,�̌����>>�>��{�������?>�?��{�������@>�@��{̌�����H�H�D������I�I��̌����RR�R��{���(����SR�S��{̌�(����TT�T�D���D����UT�U��̌�D��������ԇ���`������ԇ̌�`������ԇ���`������ԇ̌�`������ԇ���`������ԇ̌�`����������`�������̌�`����������`�������̌�`������Z�������j�������j������P\������(b�����{�����{�����i�����̌����������������������������,��,��,��<��<��<�\�\��L��L�ܘܘܘܘܘܘܘܘܘl�l�l���������|�|�|�|�|�|�|�̘|�̘��������������������������������������������������������������l�l�l�������������������������WEVT�
��
��� �`�4�p�TTBL�TEMP�̸������RX�x��C�����D�	EventDataA��Q�oData9K�NameResourceConsumerPdo
A��C�oData+K�NameConnectionId
A��o�oDataWK�Name"ResourceConsumerInstancePathLength
A��c�oDataKK�NameResourceConsumerInstancePath
�H�h���,ResourceConsumerPdo ConnectionIdLResourceConsumerInstancePathLength@ResourceConsumerInstancePathTEMP��BǶ��� U��͆YT����D�	EventDataA��1�oDataK�NamePdo
A��=�oData%K�Name	ParentPdo
��PdoParentPdoTEMP8�:ym�.2_���a|Վ����D�	EventDataA��9�oData!K�NameDevNode
A��E�oData-K�Name
ParentDevNode
�$�DevNode ParentDevNodeTEMPL�����i_9[�k;�����FD�	EventDataA��9�oData!K�NameDevNode
A��E�oData-K�Name
ParentDevNode
A��O�oData7K�NameInstancePathLength
A��C�oData+K�NameInstancePath
�$�D�p�DevNode ParentDevNode,InstancePathLength InstancePathPRVA`��Microsoft-Windows-Kernel-PnP-RundownOPCO00�win:InfoLEVL@P8�(win:InformationalTASK������������������<ConnectionResourceConsumerParentPdo ParentDevNodeKEYW8����P�SleepStudyEVNT���������,�l�@��������,���D��������,���H�����D���,���L�@�@�@�@����p��žz!š��m�=IFъ�'�uD�ֻm�ۥ��*����WEVT_TEMPLATEMUIMUIen-US8!0�!*	*�H��
��!0�!10
	`�He0\
+�7�N0L0
+�70	���010
	`�He m)��t��T'���2���(rl��8>.ig�!���
�0�0��3�,E�E�HD�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
201215212914Z
211202212914Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
���M�H�o]�ԫp��D�՝և�6�*/^�bn��Pb�`"3��5L�� ����%�AC�%m�����YsaY2��)�p�0������y�	o��k�#7�|]�9O+�ĭ��m.�@�O��ˊ:H���@�!�]9��^L�
��e!*r�Q�m��g�n3����v�+��C�
z�~�[-~@�i7�P�ո�'=���rl"�,�^��ɢ6����&Q{����1��#l�&�\̎�":������0�~0U%0
+�7
+0U��h\��2��)B��Y*30TUM0K�I0G1-0+U$Microsoft Ireland Operations Limited10U
229879+4633440U#0��)9�ėx͐��O��|U�S0TUM0K0I�G�E�Chttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
�6�Ǻp��8���n�5%�KR]��U��n6�\�w�9
,���JX|f���m��O=3�g�x�5�4����L�E��5��޶�@�[���_�O>��S�O�\M�g�T�[�k
Dz+,�73��Z���7�m���J�L}(��|�VC�#���{g�6#�O�_z��ц<����]�겥~+���ڍo>��3=�j�a��{���B�T�x�Ҟ����㞼CI*
��f�gX��\\��0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1��0��0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113�,E�E�HD�0
	`�He��0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" ��]�Kf��$Ϯ%�y�6/�z@0�e��0<
+�7
1.,9FIbWFnf4vnDryBkj5Fgmlj2QLYVo2CelXm//SVYwpQ=0Z
+�71L0J�$�"Microsoft Windows�"� http://www.microsoft.com/windows0
	*�H��
����,wN�`2�
F��n(Y�O�0/�6�H�,��9�IX)�N���N`[˦����ђ�;�ʀ��8^�]�|6���ڢ������+6( �#tP�fm�~�0.�;95�ܩҿ9�ql1�æ�*�L�ܥD�鋛�s��h�|�[l@���3���.�~�-��FЂ�8=����'�EU��Ĉ'׼3HvD6=��>w�'�u;�N%]�}�0QG$�1����C?GH��Tꡂ�0��
+�71��0��	*�H��
���0��10
	`�He0�P*�H��
	��?�;0�7
+�Y
010
	`�He 4P�=�^�S��4��`��:Q2@:s=��I`��Cx20210508011544.01Z0����0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1&0$UThales TSS ESN:D6BD-E3E7-16851%0#UMicrosoft Time-Stamp Service��<0��0�٠3PX�ԧ�0�P0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
201112182603Z
220211182603Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1&0$UThales TSS ESN:D6BD-E3E7-16851%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
��z�{*Y�'V�
�3R�ٗ�>F4S�^��`�o=�λ���W�c��m�v�2I�@��b&���
�OJ�M�94�u�v��]&��?/lk��/��<X�u�'��#���-�o>�5w�|id�H���rdT�����,��7+�������=씸+ty?1�m�b�Q.���AU#bBB�H?vP���m9U܉���ɗZ�n�V�ȫ��|�A�M*�8y���=K};��a\�ۇ�8O�*%���0�0U�UEۭd/C�C;��E~0U#0��c:\�1��C{|F�3hZ�mU0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0U�00U%0
+0
	*�H��
�Q?htr�����/��,L:��ރ���X�{|�^���V`�r6�&�t���Ŗ���ocDu�e�C0��*H>�4�3"�#���R<��b�Mq` ˡ�b͓�@\�Q�6fRٲk��_�|h�{�*h��Y`o���=K��.t�����4����{�fΏ������ke����h%Γ��F��Bm�B��!��s
�"G.�`x�_�ũBy�b��+�m!�h�)��d"�9�u!������^0�q0�Y�
a	�*0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
��
�w�: ����i�ktTե
����|hK,_���a�v�>f+[�S'1A��	�|a0Y�0D�`��TC�M�8�Bݓ��s0W&��E
��G�Ϳ$`2X`F�XG�2�tag�_�T�ϓL��Ħ]�an(������a�F�'$gr!��Kd�Pb�]�w=�Wu���BM@Q��>g�f��D~��K�n�ʱ��z*
1��N���5�x���<�/D����d��� 	�x����D]^�O"M���0��0	+�70U�c:\�1��C{|F�3hZ�mU0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��U ���0��0��	+�7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0
	*�H��
��Q
���?�q=���!o���1����Wm0���f�j���x�Ǩ�%��kTW+Q�D��S���`�v�@@A��\�\�^5�$VKt�Bȯ���7}Z?�yJ�R�8�/y�e٩�k����zoK0D$"<�����Y)����p�2J'�U�/���3�b_��W@��Ιf���jb��J�&�9�Jqc�{!mÜ��<�}�j�x�m���8ؔ�ƥ
������B�����"8 �%�d��~cY%z.9Wv�q����a�˚�G����ͧ��}���;q	�]t�"aڰPo�����1��:�eGx�H���r~akow��˧	�9����؂�r�����*T9�[��
U�z�s;�-��3.)��/T'!�ȬN�(���ۖ��B���AM�*��f0ӻt2K�c{���/�!�Y���D<�Pqס��U�i�W���0����M�
�]O�8/��X.�
�P5��	'ճ~5��6��_��t�I���0�70����Ф��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1&0$UThales TSS ESN:D6BD-E3E7-16851%0#UMicrosoft Time-Stamp Service�#
0+#
{�r�5kF�Z�Y�1�����0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
�@1�0"20210508053827Z20210509053827Z0w0=
+�Y
1/0-0
�@1�0
��010
�A�S06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
��`7u�n�_��{��r�Oa�4����3���S����p��-�f?$���!�0k��m��R�]>�`lq�F�Wr���DrI�ePm�V�IKpe�z\�G�ܾ��r��,z��Y�K��f_d�AGP1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103PX�ԧ�0�P0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" 8�dM"�H�1���X�H��k��d���0��*�H��
	/1��0��0��0�� l�>�/��N&a�����5f���ݐ�|/�0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103PX�ԧ�0�P0" �A��1��5�{8b���h��%L��Q���M�0
	*�H��
�Z����),�h�)y�	n:�du*�m���=�]��G�M���5�d�6�!	EA<��_��eu��#� #�/��b��
���;uG��34�W��P%��U�z���X����Gs6�C��rObܺX�.�m��qϙ=3˰M���^��C���U��*���e�2��=�������$!=���bY����;|����?������e�ςu[a�":�v�v\k��Rx�];@