Hacked By AnonymousFox

Current Path : C:/Windows/SysWOW64/WindowsPowerShell/v1.0/
Upload File :
Current File : C:/Windows/SysWOW64/WindowsPowerShell/v1.0/PSEvents.dll

MZ@	!L!This program cannot be run in DOS mode.

$<ߵRRRЫRЫPRRichRPELx!



@ 8.text@@.rsrc @@x
T88x$8.rdata8x.rdata$zzzdbg .rsrc$01!.rsrc$02 #f1\\
Nt0LRx(@Xp			$
!
WEVT_TEMPLATEMUI4VS_VERSION_INFO
cE
cE?StringFileInfo040904B0LCompanyNameMicrosoft Corporation-FileDescriptionMicrosoft PowerShell Crimson log Message Dllh$FileVersion10.0.17763.1 (WinBuild.160101.0800)2	InternalNamePSEvents.LegalCopyright Microsoft Corporation. All rights reserved.B
OriginalFilenamePSEvents.DLLj%ProductNameMicrosoft Windows Operating System>
ProductVersion10.0.17763.1DVarFileInfo$Translation	CRIM;@\Kf<ŏZ$WEVT	|
lأĨCHAN pXMicrosoft-Windows-PowerShell/OperationalPMicrosoft-Windows-PowerShell/AnalyticLMicrosoft-Windows-PowerShell/DebugLMicrosoft-Windows-PowerShell/AdminMAPS(TVMAP,|BMAPL BMAP,	
VMAP4HVMAP	

	 !"#(RemotingDataType,RemotingDestination4RemotingTargetInterface,SerializationMethod@WSManAuthenticationMechanismTTBL4iTEMPlUr\NND	EventDataAMoData5KNamecurrentActivityId
AKoData3KNameparentActivityId
8(currentActivityId(parentActivityIdTEMP}']5[`D	EventDataA?oData'KName
workflowId
workflowIdTEMP}']5[`D	EventDataA?oData'KName
workflowId
workflowIdTEMP|}']5[`D	EventDataA?oData'KName
workflowId
workflowIdTEMP@	}']5[`D	EventDataA?oData'KName
workflowId
T	workflowIdTEMP
}']5[`D	EventDataA?oData'KName
workflowId

workflowIdTEMP
}']5[`D	EventDataA?oData'KName
workflowId

workflowIdTEMP<~AڵJS1)UD	EventDataA?oData'KName
workflowId
AAoData)KNamepersistPath
workflowIdpersistPathTEMPT
Uw^T2D	EventDataA?oData'KName
workflowId
AKoData3KNameerrorDescription
D
`
workflowId(errorDescriptionTEMP}']5[`D	EventDataA?oData'KName
workflowId
0workflowIdTEMP}']5[`D	EventDataA?oData'KName
workflowId
workflowIdTEMP}']5[`D	EventDataA?oData'KName
workflowId
workflowIdTEMPh}']5[`D	EventDataA?oData'KName
workflowId
|workflowIdTEMP,}']5[`D	EventDataA?oData'KName
workflowId
@workflowIdTEMP$,e7]6RW!D	EventDataA?oData'KName
workflowId
A3oDataKNamepath
TpworkflowIdpathTEMP儇Y9NuD	EventDataAAoData)KNameparentJobId
A?oData'KName
childJobId
AIoData1KNamechildWorkflowId
 parentJobIdchildJobId$childWorkflowIdTEMPh]psɪP%zUD	EventDataA5oDataKNamejobId
A?oData'KName
workflowId
AKoData3KNameerrorDescription
jobIdworkflowId(errorDescriptionTEMPLݩb	]T>) D	EventDataA5oDataKNamejobId
A?oData'KName
workflowId
A;oData#KNamenewState
A;oData#KNameoldState
jobIdworkflowIdnewStateoldStateTEMP/̎][/tVD	EventDataA5oDataKNamejobId
jobIdTEMP5PhSAhf*D	EventDataAAoData)KNameparentJobId
A?oData'KName
childJobId
A?oData'KName
workflowId
A5oDataKNameerror
XtparentJobIdchildJobIdworkflowIderrorTEMP<+Z
mD	EventDataAAoData)KNameparentJobId
A?oData'KName
childJobId
A?oData'KName
workflowId
8TparentJobIdchildJobIdworkflowIdTEMP$@;G5MU%SD	EventDataA5oDataKNamejobId
A?oData'KName
workflowId
hxjobIdworkflowIdTEMP /̎][/tVD	EventDataA5oDataKNamejobId
4jobIdTEMP$e7]6RW!D	EventDataA?oData'KName
workflowId
A3oDataKNamepath
<XworkflowIdpathTEMP,< 7g^"D	EventDataA?oData'KName
workflowId
A7oDataKNamereason
d  workflowIdreasonTEMP(!}']5[`D	EventDataA?oData'KName
workflowId
<!workflowIdTEMP#dQeʕ=tD	EventDataACoData+KNameendpointName
A3oDataKNameuser
AAoData)KNamehostingMode
A;oData#KNameprotocol
AEoData-KName
configuration
d##### endpointNameuserhostingModeprotocol configurationTEMPD$b#V~HPg}yMD	EventDataA?oData'KName
workflowId
ACoData+KNamemanagedNodes
$%workflowId managedNodesTEMPX&I+_Z-D	EventDataACoData+KNameendpointName
ACoData+KNameendpointType
ACoData+KNameregisteredBy
&&& endpointName endpointType registeredByTEMP'+5W]IkJdD	EventDataACoData+KNameendpointName
' endpointNameTEMP0,)1mT](8'o6D	EventDataAGoData/KNamecheckpointPath
AKoData3KNameconfigProviderId
A;oData#KNameuserName
A3oDataKNamepath
|))))$checkpointPath(configProviderIduserNamepathTEMP4*=J\zȐyUD	EventDataA?oData'KName
parameters
A=oData%KName	computers
*+parameterscomputersTEMP+:$=iXpqίhqZD	EventDataA9oData!KNamecommand
+commandTEMP<,/4Z:RZ{gMD	EventDataACoData+KNameendpointName
A=oData%KName	enabledBy
,- endpointNameenabledByTEMPD-~T	aPZάD	EventDataACoData+KNameendpointName
A?oData'KName
disabledBy
 .@. endpointNamedisabledByTEMPTD/fOnUݏ54D	EventDataACoData+KNameendpointName
AGoData/KNameunregisteredBy
l// endpointName$unregisteredByTEMPD0DAR+#*JD	EventDataACoData+KNameendpointName
A?oData'KName
modifiedBy
00 endpointNamemodifiedByTEMPT1Uw^T2D	EventDataA?oData'KName
workflowId
AKoData3KNameerrorDescription
2 2workflowId(errorDescriptionTEMP`3g$WE9D	EventDataA?oData'KName
workflowId
A;oData#KNamenewState
A;oData#KNameoldState
333workflowIdnewStateoldStateTEMP4+5W]IkJdD	EventDataACoData+KNameendpointName
4 endpointNameTEMPL5+5W]IkJdD	EventDataACoData+KNameendpointName
`5 endpointNameTEMP6}']5[`D	EventDataA?oData'KName
workflowId
(6workflowIdTEMPH7L1Wh0DD	EventDataACoData+KNameendpointName
A?oData'KName
configName
ACoData+KNameallowedValue
AIoData1KNamevalueInQuestion
8,8H8h8 endpointNameconfigName allowedValue$valueInQuestionTEMP 9}']5[`D	EventDataA?oData'KName
workflowId
49workflowIdTEMP<,:EcIXmOLD	EventDataA?oData'KName
workflowId
AAoData)KNamemanagedNode
T:p:workflowIdmanagedNodeTEMPDl;HHtk4Wh4IucD	EventDataA?oData'KName
workflowId
ACoData+KNameactivityName
;;workflowId activityNameTEMPh<.mP`̿idD	EventDataACoData+KNameactivityName
|< activityNameTEMP\=VE!\3m?D	EventDataACoData+KNameactivityName
AKoData3KNameactivityTypeName
== activityName(activityTypeNameTEMP4>a#,SQ%-@.D	EventDataA?oData'KName
workflowId
A;oData#KNamexamlFile
>?workflowIdxamlFileTEMP4@a#,SQ%-@.D	EventDataA?oData'KName
workflowId
A;oData#KNamexamlFile
,@H@workflowIdxamlFileTEMPTHAUw^T2D	EventDataA?oData'KName
workflowId
AKoData3KNameerrorDescription
pAAworkflowId(errorDescriptionTEMPHB}']5[`D	EventDataA?oData'KName
workflowId
\BworkflowIdTEMPC}']5[`D	EventDataA?oData'KName
workflowId
 CworkflowIdTEMPC}']5[`D	EventDataA?oData'KName
workflowId
CworkflowIdTEMP8EYVPPG3p2D	EventDataA?oData'KName
workflowId
AQoData9KNameactivityDisplayName
ACoData+KNameactivityType
tEEEworkflowId,activityDisplayName activityTypeTEMPGYVPPG3p2D	EventDataA?oData'KName
workflowId
AQoData9KNameactivityDisplayName
ACoData+KNameactivityType
PGlGGworkflowId,activityDisplayName activityTypeTEMPHw0@d^?nD	EventDataA?oData'KName
workflowId
ACoData+KNameactivityName
AOoData7KNamefailureDescription
(IDIdIworkflowId activityName,failureDescriptionTEMPDpJ`0|8%RKߒD	EventDataA?oData'KName
runspaceId
ACoData+KNameavailability
JJrunspaceId availabilityTEMPKd_R?ED	EventDataA?oData'KName
runspaceId
A;oData#KNamenewState
A;oData#KNameoldState
(LDL\LrunspaceIdnewStateoldStateTEMPMnי\y·ZD	EventDataA9oData!KNamemessage
MmessageTEMPMo(9P𗆤ΫXD	EventDataA7oDataKNameparam1
Mparam1TEMPN~(^$Um0&D	EventDataA7oDataKNameparam1
A7oDataKNameparam2
NNparam1param2TEMPPt%oD^fh[lD	EventDataA7oDataKNameparam1
A7oDataKNameparam2
A7oDataKNameparam3
@PTPhPparam1param2param3TEMPQ"eReRLuD	EventDataA7oDataKNameparam1
A7oDataKNameparam2
A7oDataKNameparam3
A7oDataKNameparam4
R(R<RPRparam1param2param3param4TEMP,UZE#V}D	EventDataA1oDataKNameuri
A5oDataKNameshell
A;oData#KNameuserName
AAoData)KNameopentimeout
AAoData)KNameidletimeout
AEoData-KName
canceltimeout
A3oDataKNameauth
A?oData'KName
thumbPrint
A?oData'KName
redircount
AEoData-KName
recvdDataSize
	ACoData+KNamerecvdObjSize
|VVVVVVTWW4WPWpWurishelluserNameopentimeoutidletimeout canceltimeoutauththumbPrintredircount recvdDataSize recvdObjSizeTEMPXD._!R|D	EventDataA?oData'KName
InstanceId
ACoData+KNameMaxRunspaces
ACoData+KNameMinRunspaces
XY0YInstanceId MaxRunspaces MinRunspacesTEMP,[L]~U՜+[D	EventDataAQoData9KNameRunspace_InstanceId
AUoData=KNamePowerShell_InstanceId
AAoData)KNameDestination
A;oData#KNameDataType
AIoData1KNameTargetInterface
[[[\ \,Runspace_InstanceId0PowerShell_InstanceIdDestinationDataType$TargetInterfaceTEMP`]1$R1Y2UsD	EventDataA=oData%KName	SessionId
A?oData'KName
PipelineId
A;oData#KNameDataSize
]]]SessionIdPipelineIdDataSizeTEMP_up5]P.6JND	EventDataAQoData9KNameRunspace_InstanceId
AUoData=KNamePowerShell_InstanceId
A;oData#KNameDataSize
A;oData#KNameDataType
AIoData1KNameTargetInterface
$`P````,Runspace_InstanceId0PowerShell_InstanceIdDataSizeDataType$TargetInterfaceTEMP4au4X˓̀D	EventDataA=oData%KName	SessionId
A?oData'KName
PipelineId
aaSessionIdPipelineIdTEMPczT∻!xD	EventDataA=oData%KName	SessionId
A?oData'KName
PipelineId
A=oData%KName	ErrorCode
ACoData+KNameErrorMessage
A?oData'KName
StackTrace
d0dLddddSessionIdPipelineIdErrorCode ErrorMessageStackTraceTEMPeo%I*YbVTD2БD	EventDataA=oData%KName	SessionId
A?oData'KName
PipelineId
A?oData'KName
SignalCode
ef0fSessionIdPipelineIdSignalCodeTEMPg-yϲђ^ͳwdTD	EventDataA=oData%KName	SessionId
A1oDataKNameUri
@gXgSessionIdUriTEMPPiJ~Uvw!D	EventDataA;oData#KNameObjectId
	A?oData'KName
FragmentId
	A5oDataKNamesFlag
A5oDataKNameeFlag
AGoData/KNameFragmentLength
AIoData1KNameFragmentPayload
		i		iijj@jObjectIdFragmentIdsFlageFlag$FragmentLength$FragmentPayloadTEMPPj)5H7^AdD	EventDataTEMPkDARN/D	EventDataAKoData3KNameDeserializedType
ACoData+KNameCastedToType
AGoData/KNameRehydratedType
(lPlpl(DeserializedType CastedToType$RehydratedTypeTEMP0n1/p1+\_hD	EventDataAKoData3KNameDeserializedType
ACoData+KNameCastedToType
AMoData5KNameTypeCastException
AWoData?KNameTypeCastInnerException
nnnn(DeserializedType CastedToType(TypeCastException4TypeCastInnerExceptionTEMPp+GAX["mWw+fD	EventDataAGoData/KNameSerializedType
AEoData-KName
OriginalDepth
AGoData/KNameOverridenDepth
A]oDataEKNameCurrentDepthBelowTopLevel
q4qTqxq$SerializedType OriginalDepth$OverridenDepth8CurrentDepthBelowTopLevelTEMPTr/{Ԁa^a&$D	EventDataAGoData/KNameSerializedType
AEoData-KName
OverridenMode
r(r$SerializedType OverridenModeTEMP<tiO-#U酡D	EventDataACoData+KNamePropertyName
AMoData5KNamePropertyOwnerType
ACoData+KNameGetterScript
xttt PropertyName(PropertyOwnerType GetterScriptTEMPT`vfQ)]`X$
JD	EventDataACoData+KNamePropertyName
AMoData5KNamePropertyOwnerType
A=oData%KName	Exception
AGoData/KNameInnerException
vvvw PropertyName(PropertyOwnerTypeException$InnerExceptionTEMPX xP!S
t9PD	EventDataAQoData9KNameTypeBeingEnumerated
A=oData%KName	Exception
Hxtx,TypeBeingEnumeratedExceptionTEMPXyP+Q]P9Z-mD	EventDataA3oDataKNameType
A=oData%KName	Exception
yyTypeExceptionTEMPz,lV^#%BD	EventDataAWoData?KNameTypeOfObjectAtMaxDepth
AWoData?KNamePropertyNameAtMaxDepth
A5oDataKNameDepth
,{`{{4TypeOfObjectAtMaxDepth4PropertyNameAtMaxDepthDepthTEMP|vl1\ٿTD	EventDataA?oData'KName
LineNumber
ACoData+KNameLinePosition
A=oData%KName	Exception
} }@}LineNumber LinePositionExceptionTEMP`~*ʷSwo.KD	EventDataAioDataQKNameTypeOfObjectWithMissingProperty
ACoData+KNamePropertyName
~~DTypeOfObjectWithMissingProperty PropertyNameTEMPh+XѲvD	EventDataA/oDataKNameId
A?oData'KName
InstanceId
A3oDataKNameName
A;oData#KNameLocation
A5oDataKNameState
A9oData!KNameCommand
(4P`xIdInstanceIdNameLocationStateCommandTEMPpXL`ZO5D	EventDataA9oData!KNameMessage
A;oData#KNameCategory
A7oDataKNameReason
A?oData'KName
TargetName
AUoData=KNameFullyQualifiedErrorId
AKoData3KNameExceptionMessage
AQoData9KNameExceptionStackTrace
AYoDataAKNameExceptionInnerException
$8T؅MessageCategoryReasonTargetName0FullyQualifiedErrorId(ExceptionMessage,ExceptionStackTrace4ExceptionInnerExceptionTEMP$-6WZ	l[D	EventDataAAoData)KNameContextInfo
A;oData#KNameUserData
A9oData!KNamePayload
`|ContextInfoUserDataPayloadTEMPdXOs~b^UZzD	EventDataAEoData-KName
MessageNumber
ACoData+KNameMessageTotal
AIoData1KNameScriptBlockText
AEoData-KName
ScriptBlockId
A3oDataKNamePath
ȉ,L MessageNumber MessageTotal$ScriptBlockText ScriptBlockIdPathTEMPD<frN2T3%z>D	EventDataAEoData-KName
ScriptBlockId
A?oData'KName
RunspaceId
d ScriptBlockIdRunspaceIdTEMPi)R@feՍHD	EventDataA=oData%KName	ClassName
A?oData'KName
MethodName
ACoData+KNameWorkflowGuid
A9oData!KNameMessage
A9oData!KNameJobData
ACoData+KNameActivityName
ACoData+KNameActivityGuid
A?oData'KName
Parameters
Ԏ$8XxClassNameMethodName WorkflowGuidMessageJobData ActivityName ActivityGuidParametersTEMPXVz.ZR^M6
=D	EventDataAQoData9KNameScheduledJobDefName
A=oData%KName	StartTime
Ԑ,ScheduledJobDefNameStartTimeTEMP-]8i6QD	EventDataAQoData9KNameScheduledJobDefName
A;oData#KNameStopTime
A5oDataKNameState
Lx,ScheduledJobDefNameStopTimeStateTEMP.]+Z[W`(D	EventDataA3oDataKNameName
A9oData!KNameMessage
A?oData'KName
StackTrace
AGoData/KNameInnerException
L\pNameMessageStackTrace$InnerExceptionTEMPDQ,P+tKp`D	EventDataA?oData'KName
TrackingId
XTrackingIdTEMPG#X$=pD	EventDataAOoData7KNameProxyJobInstanceId
,,ProxyJobInstanceIdTEMPK[Z]^<.zD	EventDataAYoDataAKNameProxyChildJobInstanceId
4ProxyChildJobInstanceIdTEMP\sP2gwc4|D	EventDataA[oDataCKNameWorkflowJobJobInstanceId
8WorkflowJobJobInstanceIdTEMPL:U-Z&e(i3|D	EventDataA?oData'KName
TrackingId
AcoDataKKNameContainerParentJobInstanceId
tTrackingId@ContainerParentJobInstanceIdTEMPyP*_WW/D	EventDataAUoData=KNameWorkflowJobInstanceId
AcoDataKKNameContainerParentJobInstanceId
<0WorkflowJobInstanceId@ContainerParentJobInstanceIdTEMPNS_DD	EventDataAOoData7KNameProxyJobInstanceId
AcoDataKKNameContainerParentJobInstanceId
,ProxyJobInstanceId@ContainerParentJobInstanceIdTEMP؝Ө/RsED	EventDataAcoDataKKNameContainerParentJobInstanceId
@ContainerParentJobInstanceIdTEMP4?4{dfXØE QD	EventDataAAoData)KNameCurrentLine
A;oData#KNameFileName
,HCurrentLineFileNameTEMP<z#aSl3zR\D	EventDataA;oData#KNameFileName
FileNamePRVAP0Microsoft-Windows-PowerShellOPCO0P0h

000

00С0000,0L0d0x0000win:Startwin:StopOpenCloseConnectDisconnectNegotiateCreateConstructorDispose EventHandlerExceptionMethodSendReceiveRehydration0SerializationSettings ShuttingDownLEVLPPPhPPPȣwin:Errorwin:Warning(win:Informationalwin:VerboseDebugTASKpp8p\p|ppܦpp0		p\ddp|eepffpggpԧhhpiipjjp0nnpTooptxxpp$CreateRunspace$ExecuteCommand Serialization<Powershell-Console-Startup$WorkflowHosting(WorkflowExecution,WorkflowPersistence,WorkflowValidation ConfigurationEngineStartEngineStop CommandStartCommandStop ProviderStart ProviderStop$ExecutePipeline ScheduledJobNamedPipe ISEOperationwin:NoneKEYWȩ @ 	4
H1dRunspacePipelineProtocolTransportHostCmdletsSerializerSessionPluginPSWorkflow(win:ResponseTimeEVNTx% 8 8 8 , , , ,f̠8	
f	\8
g
\84 @, @, @, @,@8 @,  ,Mؠ8  Wؠ8  
 8$ 
 8( 
 ,M8, 
 N80/@/,M84/@/,M88/@/,M8</@/,M8@/@/,D/@/dR,H/
/8L`x``,ܥ`x``,ܥ`x`,ܥ`x`,ܥ`x`,ܥ`x`,ܥ`x`,ܥ`x`,ܥ`x`,ܥ``,`x`,ܥ`x`,,ܥ`x`,,ܥ`x`,,ܥ`x`,,ܥ`x`,,ܥp@@pj,8Pp@@pl,Tp@@p$o88Xp@@pq88\p@@ps `p@@pt dp@@p4w hp@@px l
p@@
pypp@@p{tp@@pX} x@PY ,|
@N
@b	
	N
b@,M,@,M,
@,M,
@,M,@D\,@`,@` ,@D\ ,@`, @ `,!
@!`,"
@"`,#
@#d,$
@$`,%@%Lf,Q@Q],R@RN,S@SM,T@T|P,U@UM,V
@VN,W
@WN,X
@XN,Y
@YN,a@aM,b@bM,c@cdg 8d@ddg8e@edjD8x,8,8  N , ~, ,M, /dR,@X!8T@#8p	@	H28p@38T@48T@58p @D68p$@88p(@P98p,@:8p0@<8p4@=8p8@,?8p<@`@8p@@A8D@xB8H@<C8L@D8pP @ E8T!@!G8pX"@"I8p\#@#J8p`$@$`8pd%@%L8ph&@&8pl'@' 8pp(@(8pt)@)D8px*@*\8p|,@,8p-@-8p.@.D8p0@08p1@18p2@2p8p3@38p4@48p5@58p6@6$8p7@78p8@8h8p9@9
8p:@:8p;@;p	8p<@<48p=@=
8p>@>4
8p?@?;8p@@@08pA	@A,%8ĤB	@B/8ĤC	@C\.8ĤD	@D-8ĤE	@E+8ĤF@F$+8pG@G)8pH@H&8TI I', , , , , L, P, P, P,	 	P,
 
Й, |,  ,
 
 , t, t, t, t, X, X, , ,  tL, M,n,n,n
oM8oM8oN8oN8oN8       ШШШ     ШШШШШШШШШШШШШ00000000000pp``````````````````````````````````````````````````````````Luaնlp83F柣o*WEVT_TEMPLATEMUIMUIen-US

Hacked By AnonymousFox1.0, Coded By AnonymousFox