KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/winevt/Logs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/winevt/Logs/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx
ElfFile��
�	{�ElfChnk{{��������	�9�v���=�����f?�m�MF��[
tG-�E=��MI�Y�
�+O�g]'�T**�l�jY\���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!
F@�l�jY\���b��A�M�p��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����O������=Z_hUe�7M���tvD�	EventDataA��K���oData+=DisplayDriverName
rdpudd.dll**h�A�jY\���1�&
bz�!�@�A�jY\���b��A�M�p��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
��V��NW=�7_� ���tvA��A�3=TransportProtocolName
A���=Port
TCP=
h**��h�jY\���1�&
bz!!�@�h�jY\���b��A�M�p��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**��jY\���1�&
bz!!�@�jY\���b��A�M�p��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**��a�jY\���1�&
bz!!�@�a�jY\���b��A�M�p��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**p���\���1�&
bz�!�@���\��� �"�N��EO���+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
"TCP10.0.1.171:61810p**8���\���1�&
bz�!
A@���\��� �"�N��EO���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**@*���\���1�&
bz�!
H@*���\��� �"�N��EO��(*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=�qMs��_����=jD��8vA��+�=
MethodName
"PrepareForAccept@**�	���\���1�&
bz1!
H@���\��� �"�N��EO��(*	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=SendPolicyData�** 
�	�\���1�&
bzs!�@�	�\��� �"�N��EO��(*
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S��]�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **�	�\���1�&
bzi!�@�	�\��� �"�N��EO���1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2}�b�2Y`X+L�
Wl��:��.vA��!�=error
@**(��	�\���1�&
bzy!�@��	�\��� �"�N��EO���1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�}���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**�
Q�	�\���1�&
bz!�@Q�	�\��� �"�N��EO��5
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2}@�**���	�\���1�&
bz1!
H@��	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=OnDisconnected�**���	�\���1�&
bz9!f@��	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�LNc�T�� �����v�**���	�\���1�&
bz�!�@��	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��E)W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**`r�	�\���1�&
bz�!�@r�	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+V�4��C�[i/1��R�t��hvA��-�=ChannelName
A��'�=TunnelID
rdpinpt`**���	�\���1�&
bz)!�@��	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpcmd�**��	�\���1�&
bza!�@��	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+FMicrosoft::Windows::RDS::CoreInput**��	�\���1�&
bz)!�@�	�\��� �"�N��EO��lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdplic�**�p�	�\���1�&
bzA!�@p�	�\�I� �7��@���
d��+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�"TCP10.0.1.171:61816�**���	�\���1�&
bz'!
A@��	�\�I� �7��@���
d��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�RDP-Tcp#0�**�u��	�\���1�&
bz5!
H@u��	�\�I� �7��@���
d��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="PrepareForAccept�**����	�\���1�&
bz1!
H@���	�\�I� �7��@���
d��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=SendPolicyData�**��!�	�\���1�&
bz!�@�!�	�\�I� �7��@���
d��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S��]�**hn��	�\���1�&
bz�!e@n��	�\�I� �7��@���
d�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^E=]�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**����	�\���1�&
bz)!�@���	�\�I� �7��@���
d�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdplic�**���	�\���1�&
bz)!�@��	�\�I� �7��@���
d�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpcmd�**����	�\���1�&
bz5!
H@���	�\�I� �7��@���
d�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="OnStartLicensing�**�z��	�\���1�&
bz5!
H@z��	�\�I� �7��@���
d��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="AcceptConnection�**0'��	�\���1�&
bz�!h@'��	�\�I� �7��@���
d��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�G�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**� d��	�\���1�&
bz�!
G@d��	�\�I� �7��@���
d��" Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���MI@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**�!���	�\���1�&
bzA!
H@���	�\�I� �7��@���
d��"!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=.GetSecurityFilterCreds�**�"1��	�\���1�&
bz7!
H@1��	�\�I� �7��@���
d��""Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=$SendClientLicense�**�#���	�\���1�&
bz5!
H@���	�\�I� �7��@���
d��"#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="ProtocolComplete�**�$��	�\���1�&
bz!b@��	�\�I� �7��@���
d��+$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�**�%��	�\���1�&
bz!d@��	�\�I� �7��@���
d��+%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�**�&���	�\���1�&
bz!�@���	�\�I� �7��@���
d��+&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����T=����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**�'��	�\���1�&
bzK!
H@��	�\�I� �7��@���
d��"'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=8AuthenticateClientToSession�**(�	�\���1�&
bzo!�@�	�\�I� �7��@���
d��+(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�Y��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**p)yP
�\���1�&
bz�!
B@yP
�\�I� �7��@���
d��1)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����[E)�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**�*;�V
�\���1�&
bz+!�@;�V
�\�I� �7��@���
d��2*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpgrfx�**�+_�V
�\���1�&
bz!!@_�V
�\�I� �7��@���
d��1+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�**,��V
�\���1�&
bzQ!
H@��V
�\�I� �7��@���
d��1,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=>Waiting for graphics subsystem**�-�"X
�\���1�&
bz+!�@�"X
�\�I� �7��@���
d�-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpinpt�**.)X
�\���1�&
bzW!�@)X
�\�I� �7��@���
d�.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����T<TCP: Reason Code: 5 (Unknown)**�/�+X
�\���1�&
bz�!�@�+X
�\�I� �7��@���
d�/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��g)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**�0�5X
�\���1�&
bz+!
H@�5X
�\�I� �7��@���
d�l0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=OnConnected�**�1�5X
�\���1�&
bz#!
H@�5X
�\�I� �7��@���
d�l1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=OnReady�**2x>Y
�\���1�&
bza!�@x>Y
�\�I� �7��@���
d�52Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+FMicrosoft::Windows::RDS::CoreInput**3\Y
�\���1�&
bze!�@\Y
�\�I� �7��@���
d�53Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+JMicrosoft::Windows::RDS::MouseCursor**4��[
�\���1�&
bz_!�@��[
�\�I� �7��@���
d�54Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+DMicrosoft::Windows::RDS::Graphics**5�F�
�\���1�&
bzi!�@�F�
�\�I� �7��@���
d��5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4
t3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**(6Qƒ
�\���1�&
bz{!�@Qƒ
�\�I� �7��@���
d�046Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+`Microsoft::Windows::RDS::Video::Control::v08.01(** 7�҃
�\���1�&
bzu!�@�҃
�\�I� �7��@���
d��(7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+ZMicrosoft::Windows::RDS::Video::Data::v08.01 **8wӃ
�\���1�&
bzo!�@wӃ
�\�I� �7��@���
d��(8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+TMicrosoft::Windows::RDS::Geometry::v08.01**�9~��
�\���1�&
bzI!
H@~��
�\�I� �7��@���
d��(9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=6ConnectNotify(SessionId=1)�**�:���
�\���1�&
bz'!�@���
�\�I� �7��@���
d�P:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpdr�**�;D#�
�\���1�&
bzA!�@D#�
�\�I� �7��@���
d�:;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+&AUDIO_PLAYBACK_DVC�**�<-~�
�\���1�&
bzM!�@-~�
�\�I� �7��@���
d�:<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+2AUDIO_PLAYBACK_LOSSY_DVC�**=`]�
�\���1�&
bzS!�@`]�
�\�I� �7��@���
d�04=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+8TextInput_ServerToClientDVC**>�ǜ
�\���1�&
bzS!�@�ǜ
�\�I� �7��@���
d�04>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+8TextInput_ClientToServerDVC**?�ϥ
�\���1�&
bzQ!�@�ϥ
�\�I� �7��@���
d��?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+6RDCamera_Device_Enumerator**@g%�
�\���1�&
bzo!�@g%�
�\�I� �7��@���
d��1@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+TMicrosoft::Windows::RDS::Geometry::v08.01**A��
�\���1�&
bzY!�@��
�\�I� �7��@���
d�04AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+>Microsoft::Windows::RDS::Input**B2��
�\���1�&
bzY!�@2��
�\�I� �7��@���
d�lBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+>Microsoft::Windows::RDS::Input**C5t�
�\���1�&
bz[!�@5t�
�\�I� �7��@���
d�:CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+@Microsoft::Windows::RDS::Notify**D�v�
�\���1�&
bz[!�@�v�
�\�I� �7��@���
d�lDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+@Microsoft::Windows::RDS::Notify**E��
�\���1�&
bzk!�@��
�\�I� �7��@���
d�PEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+PMicrosoft::Windows::RDS::DisplayControl**F���
�\���1�&
bz_!�@���
�\�I� �7��@���
d�:FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+DMicrosoft::Windows::RDS::Location**G㧲
�\���1�&
bz_!�@㧲
�\�I� �7��@���
d�lGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+DMicrosoft::Windows::RDS::Location**�H ��
�\���1�&
bz+!�@ ��
�\�I� �7��@���
d�:HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+cliprdr�**�IJ�f�\���1�&
bzE!
H@J�f�\�I� �7��@���
d��(IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=2LogonNotify(SessionId=1)�**�JR%h�\���1�&
bz'!�@R%h�\�I� �7��@���
d�<<JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**PK��t�\���1�&
bz�!�@��t�\�I� �7��@���
d��CKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���-�,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName

�SERVER-PCP**LN��\���1�&
bzo!�@N��\�I� �7��@���
d�PLMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+TMicrosoft::Windows::RDS::Geometry::v08.01**M���\���1�&
bzo!�@���\�I� �7��@���
d��MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+TMicrosoft::Windows::RDS::Geometry::v08.01** NZ���\���1�&
bzw!�@Z���\�I� �7��@���
d��NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����T\TCP: Reason Code: 3 (No UDP Packets Received) **�O����\���1�&
bz'!�@����\�I� �7��@���
d��(OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**�P�V�\���1�&
bz'!�@�V�\�I� �7��@���
d�tMPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**�Q;�͖�\���1�&
bz!k@;�͖�\�I� �7��@���
d�tMQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�**xR��\���1�&
bz�!�@��\�I� �7��@���
d�tMRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�S���\���1�&
bz1!
H@���\�I� �7��@���
d�lSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=OnDisconnected�**�Ṱ�\���1�&
bz5!
H@̭�\�I� �7��@���
d��1TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="PreDisconnect(0)�**�U��\���1�&
bz7!
H@��\�I� �7��@���
d��1UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=$SetErrorInfo(0x0)�**�V���\���1�&
bz!f@���\�I� �7��@���
d�lVMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L]'�**�W
��\���1�&
bz'!�@
��\�I� �7��@���
d�lWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��E)�**�X:��\���1�&
bz+!�@:��\�I� �7��@���
d�lXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpinpt�**�YU��\���1�&
bz)!�@U��\�I� �7��@���
d�lYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpcmd�**Ze��\���1�&
bza!�@e��\�I� �7��@���
d�lZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+FMicrosoft::Windows::RDS::CoreInput**�[̲�\���1�&
bz)!�@̲�\�I� �7��@���
d�l[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdplic�**�\��\���1�&
bz+!�@��\�I� �7��@���
d�l\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpgrfx�**�]���\���1�&
bz+!�@���\�I� �7��@���
d�l]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+railenc�**8^��\���1�&
bz�!�@��\�I� �7��@���
d�l^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+nMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**_;��\���1�&
bz_!�@;��\�I� �7��@���
d�l_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+DMicrosoft::Windows::RDS::Graphics**`_��\���1�&
bze!�@_��\�I� �7��@���
d�l`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+JMicrosoft::Windows::RDS::MouseCursor**�a���\���1�&
bz%!�@���\�I� �7��@���
d�laMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+
ECHO�**�b��\���1�&
bzA!�@��\�I� �7��@���
d�lbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+&AUDIO_PLAYBACK_DVC�**�c��\���1�&
bzM!�@��\�I� �7��@���
d�lcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+2AUDIO_PLAYBACK_LOSSY_DVC�**dJ��\���1�&
bzS!�@J��\�I� �7��@���
d�ldMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+8TextInput_ServerToClientDVC**�e'��\���1�&
bz'!�@'��\�I� �7��@���
d�leMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpdr�**�f���\���1�&
bz)!�@���\�I� �7��@���
d�lfMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+rdpsnd�**�g8��\���1�&
bz+!�@8��\�I� �7��@���
d�lgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+cliprdr�**h���\���1�&
bzS!�@���\�I� �7��@���
d�lhMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+8TextInput_ClientToServerDVC**iL��\���1�&
bzQ!�@L��\�I� �7��@���
d�liMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+6RDCamera_Device_Enumerator**j���\���1�&
bzo!�@���\�I� �7��@���
d�ljMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+TMicrosoft::Windows::RDS::Geometry::v08.01**k.��\���1�&
bzk!�@.��\�I� �7��@���
d�lkMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+PMicrosoft::Windows::RDS::DisplayControl**�l���\���1�&
bz'!�@���\�I� �7��@���
d�llMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**�m��\���1�&
bz'!�@��\�I� �7��@���
d�lmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**�n���\���1�&
bz'!�@���\�I� �7��@���
d�lnMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4��+XPSRD�**�o}���\���1�&
bz5!
H@}���\�I� �7��@���
d��1oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs="DisconnectNotify�**�p����\���1�&
bzI!
H@����\�I� �7��@���
d��1pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=6GetServerAutoReconnectInfo�**�q ���\���1�&
bzI!
H@ ���\�I� �7��@���
d��1qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs=6GetServerAutoReconnectInfo�**�r�%��jc���1�&
bz)!
F@�%��jc�7�b�BՇN��lY���8rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����Ordpudd.dll�**�sl҈�jc���1�&
bz!!�@l҈�jc�7�b�BՇN��lY���8sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**�t�Ԉ�jc���1�&
bz!!�@�Ԉ�jc�7�b�BՇN��lY���8tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**�umB��jc���1�&
bz!!�@mB��jc�7�b�BՇN��lY���8uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**�v�L��jc���1�&
bz!!�@�L��jc�7�b�BՇN��lY���8vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**�w��3�md���1�&
bz)!
F@��3�md��b��lF���6Ӝ�,wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����Ordpudd.dll�**�x��4�md���1�&
bz!!�@��4�md��b��lF���6Ӝ�,xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**�yI�4�md���1�&
bz!!�@I�4�md��b��lF���6Ӝ�,yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**�z�5�md���1�&
bz!!�@�5�md��b��lF���6Ӝ�,zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**�{�%5�md���1�&
bz!!�@�%5�md��b��lF���6Ӝ�,{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�ElfChnk|�|�� ��,���#�v���=�����f?�m�MF��mU�EYm�mO�3�$u[�i�
5'>O�y�9g**|��Q��g���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!
F@��Q��g�%�b�՝A���~Χ�|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����O������=Z_hUe�7M���tvD�	EventDataA��K���oData+=DisplayDriverName
rdpudd.dll**h}ŽR��g���1�&
bz�!�@ŽR��g�%�b�՝A���~Χ�}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
��V��NW=�7_� ���tvA��A�3=TransportProtocolName
A���=Port
TCP=
h**�~`�R��g���1�&
bz!!�@`�R��g�%�b�՝A���~Χ�~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**��*S��g���1�&
bz!!�@�*S��g�%�b�՝A���~Χ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**��'5S��g���1�&
bz!!�@'5S��g�%�b�՝A���~Χ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**���u>�j���1�&
bz)!
F@�u>�j�u�b�RA���E{|��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����Ordpudd.dll�**����u>�j���1�&
bz!!�@��u>�j�u�b�RA���E{|��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**����u>�j���1�&
bz!!�@��u>�j�u�b�RA���E{|��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**���Zw>�j���1�&
bz!!�@�Zw>�j�u�b�RA���E{|��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**��new>�j���1�&
bz!!�@new>�j�u�b�RA���E{|��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**�����w�j���1�&
bz)!
F@���w�j��b�|C�~�C����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����Ordpudd.dll�**�����w�j���1�&
bz!!�@���w�j��b�|C�~�C����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**��U��w�j���1�&
bz!!�@U��w�j��b�|C�~�C����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
TCP=
�**���7�w�j���1�&
bz!!�@�7�w�j��b�|C�~�C����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**��
C�w�j���1�&
bz!!�@
C�w�j��b�|C�~�C����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�
UDP=
�**p�o���p���1�&
bz�!�@o���p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�$&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
TCP10.8.0.6:60654p**8����p���1�&
bz�!
A@Ů���p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�5'�Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**@�:쑠�p���1�&
bz�!
H@:쑠�p��z �ۨK�������(b�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)�qMs��_����=jD��8vA��+�=
MethodName
"PrepareForAccept@**���쑠�p���1�&
bz1!
H@�쑠�p��z �ۨK�������(b�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)SendPolicyData�** ��֒��p���1�&
bzs!�@�֒��p��z �ۨK�������(b�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���-�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **�;��p���1�&
bzi!�@;��p��z �ۨK��������c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�/�b�2Y`X+L�
Wl��:��.vA��!�=error
@**��j��p���1�&
bz!�@j��p��z �ۨK�������(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�/@�**(����p���1�&
bzy!�@���p��z �ۨK��������c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�3�/���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**��P! �p���1�&
bz1!
H@P! �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)OnDisconnected�**��K$ �p���1�&
bz9!f@K$ �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�LNc�T�� �����v�**���$ �p���1�&
bz�!�@�$ �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��u;W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**`��% �p���1�&
bz�!�@�% �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>V�4��C�[i/1��R�t��hvA��-�=ChannelName
A��'�=TunnelID
rdpinpt`**��=& �p���1�&
bz)!�@=& �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpcmd�**�o& �p���1�&
bza!�@o& �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>FMicrosoft::Windows::RDS::CoreInput**��8' �p���1�&
bz)!�@8' �p��z �ۨK��������	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdplic�**��Z̡�p���1�&
bz=!�@Z̡�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�$TCP10.8.0.6:60655�**��\m̡�p���1�&
bz'!
A@\m̡�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�5'RDP-Tcp#0�**���̡�p���1�&
bz5!
H@�̡�p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)"PrepareForAccept�**��j�̡�p���1�&
bz1!
H@j�̡�p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)SendPolicyData�**��͡�p���1�&
bz!�@͡�p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���-�**h�dz���p���1�&
bz�!e@dz���p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^mO�-�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**��Ŵ���p���1�&
bz)!�@Ŵ���p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdplic�**�����p���1�&
bz)!�@���p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpcmd�**�������p���1�&
bz5!
H@�����p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)"OnStartLicensing�**��Q����p���1�&
bz5!
H@Q����p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)"AcceptConnection�**0�k���p���1�&
bz�!h@k���p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�EY�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**������p���1�&
bz�!
G@����p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���u[@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**�����p���1�&
bzA!
H@���p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm).GetSecurityFilterCreds�**��n���p���1�&
bz7!
H@n���p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)$SendClientLicense�**��o���p���1�&
bz5!
H@o���p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)"ProtocolComplete�**��u���p���1�&
bz!b@u���p��� ��5E���{W�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�**�� u���p���1�&
bz!d@ u���p��� ��5E���{W�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�**��
}���p���1�&
bz!�@
}���p��� ��5E���{W�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����gm)����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**�����p���1�&
bzo!�@����p��� ��5E���{W�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�i��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**������p���1�&
bzK!
H@����p��� ��5E���{W��_�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)8AuthenticateClientToSession�**p�0|��p���1�&
bz�!
B@0|��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����mu;�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**���l��p���1�&
bz!!@�l��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�**��l��p���1�&
bzQ!
H@�l��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)>Waiting for graphics subsystem**��?s��p���1�&
bz+!�@?s��p��� ��5E���{W�Q�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpgrfx�**����!��p���1�&
bz+!�@��!��p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpinpt�**���!��p���1�&
bzW!�@��!��p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����g<TCP: Reason Code: 5 (Unknown)**���!��p���1�&
bz�!�@�!��p��� ��5E���{W��s�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��y)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**����!��p���1�&
bz+!
H@��!��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)OnConnected�**����!��p���1�&
bz#!
H@��!��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)OnReady�**�"�+��p���1�&
bza!�@"�+��p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>FMicrosoft::Windows::RDS::CoreInput**�[,��p���1�&
bze!�@[,��p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>JMicrosoft::Windows::RDS::MouseCursor**�=�-��p���1�&
bz_!�@=�-��p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>DMicrosoft::Windows::RDS::Graphics** �^M���p���1�&
bzw!�@^M���p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����g\TCP: Reason Code: 3 (No UDP Packets Received) **�(���p���1�&
bzi!�@(���p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4U�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**��t����p���1�&
bzI!
H@t����p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)6ConnectNotify(SessionId=1)�**��|N��p���1�&
bz'!�@|N��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpdr�**�
���p���1�&
bzS!�@
���p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>8TextInput_ServerToClientDVC**(��7��p���1�&
bz{!�@�7��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>`Microsoft::Windows::RDS::Video::Control::v08.01(** �u8��p���1�&
bzu!�@u8��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>ZMicrosoft::Windows::RDS::Video::Data::v08.01 **��8��p���1�&
bzo!�@�8��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>TMicrosoft::Windows::RDS::Geometry::v08.01**��C9��p���1�&
bzA!�@C9��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>&AUDIO_PLAYBACK_DVC�**��P��p���1�&
bzS!�@�P��p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>8TextInput_ClientToServerDVC**��a��p���1�&
bzM!�@a��p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>2AUDIO_PLAYBACK_LOSSY_DVC�**�����p���1�&
bzo!�@����p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>TMicrosoft::Windows::RDS::Geometry::v08.01**�c�?��p���1�&
bzQ!�@c�?��p��� ��5E���{W�hg�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>6RDCamera_Device_Enumerator**�o@��p���1�&
bzY!�@o@��p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>>Microsoft::Windows::RDS::Input**��v����p���1�&
bz'!�@v����p��� ��5E���{W��V�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**P�jݱ��p���1�&
bz�!�@jݱ��p��� ��5E���{W�Q�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���m�,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**��7���p���1�&
bz[!�@�7���p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>@Microsoft::Windows::RDS::Notify**�:���p���1�&
bz[!�@:���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>@Microsoft::Windows::RDS::Notify**���ˤ�p���1�&
bzk!�@��ˤ�p��� ��5E���{W��V�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>PMicrosoft::Windows::RDS::DisplayControl**�J֤�p���1�&
bz_!�@J֤�p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>DMicrosoft::Windows::RDS::Location**��!֤�p���1�&
bz_!�@�!֤�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>DMicrosoft::Windows::RDS::Location**��;���p���1�&
bz+!�@;���p��� ��5E���{W�@-�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>cliprdr�**��K���p���1�&
bzE!
H@K���p��� ��5E���{W�hg�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)2LogonNotify(SessionId=1)�**��tP���p���1�&
bz'!�@tP���p��� ��5E���{W� c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**��I���p���1�&
bzo!�@�I���p��� ��5E���{W��k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>TMicrosoft::Windows::RDS::Geometry::v08.01**�*}���p���1�&
bzo!�@*}���p��� ��5E���{W�hg�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>TMicrosoft::Windows::RDS::Geometry::v08.01**���p&��p���1�&
bz'!�@�p&��p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**����M��p���1�&
bz'!�@��M��p��� ��5E���{W��V�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**��	���p���1�&
bz'!�@	���p��� ��5E���{W�hg�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**���ԫ��p���1�&
bz'!�@�ԫ��p��� ��5E���{W�hg�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**��X�&��p���1�&
bz'!�@X�&��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**�����p���1�&
bz!k@���p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�**x����p���1�&
bz�!�@���p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�3$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�����p���1�&
bz1!
H@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)OnDisconnected�**��B��p���1�&
bz5!
H@B��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)"PreDisconnect(0)�**��|��p���1�&
bz7!
H@|��p��� ��5E���{W�(N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsm)$SetErrorInfo(0x0)�**�����p���1�&
bz!f@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�9�**�����p���1�&
bz'!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��u;�**��A��p���1�&
bz+!�@A��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpinpt�**��p��p���1�&
bz)!�@p��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpcmd�**����p���1�&
bza!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>FMicrosoft::Windows::RDS::CoreInput**��
��p���1�&
bz)!�@
��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdplic�**��4��p���1�&
bz+!�@4��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpgrfx�**��G��p���1�&
bz+!�@G��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>railenc�**8�w��p���1�&
bz�!�@w��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>nMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**����p���1�&
bz_!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>DMicrosoft::Windows::RDS::Graphics**����p���1�&
bze!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>JMicrosoft::Windows::RDS::MouseCursor**��"��p���1�&
bz%!�@"��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>
ECHO�**��'��p���1�&
bzM!�@'��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>2AUDIO_PLAYBACK_LOSSY_DVC�**�8��p���1�&
bzo!�@8��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>TMicrosoft::Windows::RDS::Geometry::v08.01**����p���1�&
bzQ!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>6RDCamera_Device_Enumerator**��A�p���1�&
bz'!�@A�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpdr�**����p���1�&
bz)!�@��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>rdpsnd�**����p���1�&
bz+!�@��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>cliprdr�**��"�p���1�&
bzS!�@�"�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>8TextInput_ServerToClientDVC**���2�p���1�&
bzA!�@�2�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>&AUDIO_PLAYBACK_DVC�**��<�p���1�&
bzS!�@�<�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>8TextInput_ClientToServerDVC**��N�p���1�&
bzY!�@�N�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>>Microsoft::Windows::RDS::Input**���b�p���1�&
bz'!�@�b�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**��r�p���1�&
bzk!�@�r�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>PMicrosoft::Windows::RDS::DisplayControl**��Ѕ�p���1�&
bz'!�@Ѕ�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�**�����p���1�&
bz'!�@���p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�>XPSRD�ElfChnk�~�~�����Υ�	<�v���=�����f?�m�MF�&�O}M**0�4��p���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@4��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
XPSRD0**����p���1�&
bz'!�@��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��i��p���1�&
bz'!�@i��p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**��ʻ�p���1�&
bz'!�@ʻ�p��� ��5E���{W��	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**@�[�0�p���1�&
bz�!
H@[�0�p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM�qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyP=
@**����0�p���1�&
bzI!
H@��0�p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6GetServerAutoReconnectInfo��u>�**���0�p���1�&
bzI!
H@�0�p��� ��5E���{W��n�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6GetServerAutoReconnectInfo�**@��7�
�q���1�&
bz�!
F@�7�
�q���b�.9[M���n~���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}������=Z_hUe�7MR��FvA��9�+=DisplayDriverName
rdpudd.dll@**h��
�q���1�&
bz�!�@��
�q���b�.9[M���n~��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V���V��NW=�7_� ���tvA��A�3=TransportProtocolName
A���=Port
TCP=
h**���
�q���1�&
bz!!�@��
�q���b�.9[M���n~��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**��h�
�q���1�&
bz!!�@�h�
�q���b�.9[M���n~��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**��u�
�q���1�&
bz!!�@�u�
�q���b�.9[M���n~��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**��)��q���1�&
bz)!
F@�)��q�s�b��*�H�/��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**���)��q���1�&
bz!!�@��)��q�s�b��*�H�/��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�
�)��q���1�&
bz!!�@
�)��q�s�b��*�H�/��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�A*��q���1�&
bz!!�@A*��q�s�b��*�H�/��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�TY*��q���1�&
bz!!�@TY*��q�s�b��*�H�/��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�	=7�'����1�&
bz)!
F@=7�'��}b�ˆF���m�e�@	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�
��7�'����1�&
bz!!�@��7�'��}b�ˆF���m�e�@
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**��7�'����1�&
bz!!�@�7�'��}b�ˆF���m�e�@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�=68�'����1�&
bz!!�@=68�'��}b�ˆF���m�e�@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�
K@8�'����1�&
bz!!�@K@8�'��}b�ˆF���m�e�@
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�wv8������1�&
bz)!
F@wv8�����$b���,A��\A_W��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�:9������1�&
bz!!�@:9�����$b���,A��\A_W��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�H<9������1�&
bz!!�@H<9�����$b���,A��\A_W��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�u�9������1�&
bz!!�@u�9�����$b���,A��\A_W��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�Զ9������1�&
bz!!�@Զ9�����$b���,A��\A_W��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**���<����1�&
bz)!
F@��<����b�PE���.���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**��X=����1�&
bz!!�@�X=����b�PE���.���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�[=����1�&
bz!!�@[=����b�PE���.���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**��=����1�&
bz!!�@�=����b�PE���.���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**���=����1�&
bz!!�@��=����b�PE���.���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**��������1�&
bz)!
F@�����h�b�%u�H��]��|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**��o�����1�&
bz!!�@�o���h�b�%u�H��]��|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�(r�����1�&
bz!!�@(r���h�b�%u�H��]��|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�������1�&
bz!!�@����h�b�%u�H��]��|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�p������1�&
bz!!�@p����h�b�%u�H��]��|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�p�����1�&
bz)!
F@p���>�b�9�uM�;˼���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�5+����1�&
bz!!�@5+��>�b�9�uM�;˼���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**��-����1�&
bz!!�@�-��>�b�9�uM�;˼���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**� �����1�&
bz!!�@���>�b�9�uM�;˼��� Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�!Ƶ����1�&
bz!!�@Ƶ��>�b�9�uM�;˼���!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�"H��	�����1�&
bz)!
F@H��	���#zb��2BD�
�(Z"��"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�#�O�	�����1�&
bz!!�@�O�	���#zb��2BD�
�(Z"��#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�$�R�	�����1�&
bz!!�@�R�	���#zb��2BD�
�(Z"��$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�%|��	�����1�&
bz!!�@|��	���#zb��2BD�
�(Z"��%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�&p��	�����1�&
bz!!�@p��	���#zb��2BD�
�(Z"��&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�'�Kf�3����1�&
bz)!
F@�Kf�3���xb�ӫ�B��'�Ѫ��'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�(��f�3����1�&
bz!!�@��f�3���xb�ӫ�B��'�Ѫ��(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�)�f�3����1�&
bz!!�@�f�3���xb�ӫ�B��'�Ѫ��)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�*�fg�3����1�&
bz!!�@�fg�3���xb�ӫ�B��'�Ѫ��*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�+yrg�3����1�&
bz!!�@yrg�3���xb�ӫ�B��'�Ѫ��+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�,��s둟���1�&
bz)!
F@��s둟�;�b�J��hI����,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�-�Bt둟���1�&
bz!!�@�Bt둟�;�b�J��hI����-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�.Et둟���1�&
bz!!�@Et둟�;�b�J��hI����.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�/q�t둟���1�&
bz!!�@q�t둟�;�b�J��hI����/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�0�t둟���1�&
bz!!�@�t둟�;�b�J��hI����0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�1Z#J�����1�&
bz)!
F@Z#J����b�ڬ�L����2�4�1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�2W
$J�����1�&
bz!!�@W
$J����b�ڬ�L����2�4�2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�3�$J�����1�&
bz!!�@�$J����b�ڬ�L����2�4�3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�4�$J�����1�&
bz!!�@�$J����b�ڬ�L����2�4�4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�5^�$J�����1�&
bz!!�@^�$J����b�ڬ�L����2�4�5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�65������1�&
bz)!
F@5������b�k0�C�\�K��	6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�7������1�&
bz!!�@������b�k0�C�\�K��	7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�8��������1�&
bz!!�@��������b�k0�C�\�K��	8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�9`������1�&
bz!!�@`������b�k0�C�\�K��	9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�:�������1�&
bz!!�@�������b�k0�C�\�K��	:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�;��[:�����1�&
bz)!
F@��[:����b�o�B��es
��;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�<��\:�����1�&
bz!!�@��\:����b�o�B��es
��<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�=�\:�����1�&
bz!!�@�\:����b�o�B��es
��=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�>�]:�����1�&
bz!!�@�]:����b�o�B��es
��>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�?z!]:�����1�&
bz!!�@z!]:����b�o�B��es
��?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�@�2_�����1�&
bz)!
F@�2_���&�b�1��K��Ct� �@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�An�3_�����1�&
bz!!�@n�3_���&�b�1��K��Ct� �AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�Bء3_�����1�&
bz!!�@ء3_���&�b�1��K��Ct� �BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�C�4_�����1�&
bz!!�@�4_���&�b�1��K��Ct� �CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�D�'4_�����1�&
bz!!�@�'4_���&�b�1��K��Ct� �DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�Eނ/�����1�&
bz)!
F@ނ/���
b�܍�O���� �EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�F�>0�����1�&
bz!!�@�>0���
b�܍�O���� �FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�GNA0�����1�&
bz!!�@NA0���
b�܍�O���� �GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�Hq�0�����1�&
bz!!�@q�0���
b�܍�O���� �HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�I��0�����1�&
bz!!�@��0���
b�܍�O���� �IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�JQ�x����1�&
bz)!
F@Q�x��9�b��B���<�JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�K��x����1�&
bz!!�@��x��9�b��B���<�KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�LW�x����1�&
bz!!�@W�x��9�b��B���<�LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�Mv��x����1�&
bz!!�@v��x��9�b��B���<�MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�N���x����1�&
bz!!�@���x��9�b��B���<�NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�O�w�8x����1�&
bz)!
F@�w�8x��cb�|�F��pb24�OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�P�"�8x����1�&
bz!!�@�"�8x��cb�|�F��pb24�PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�Q�%�8x����1�&
bz!!�@�%�8x��cb�|�F��pb24�QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�R\��8x����1�&
bz!!�@\��8x��cb�|�F��pb24�RMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�Sڬ�8x����1�&
bz!!�@ڬ�8x��cb�|�F��pb24�SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�TPco�A����1�&
bz)!
F@Pco�A���Ib���B�kA���TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�U�+p�A����1�&
bz!!�@�+p�A���Ib���B�kA���UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�V�.p�A����1�&
bz!!�@�.p�A���Ib���B�kA���VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�W�p�A����1�&
bz!!�@�p�A���Ib���B�kA���WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�X��p�A����1�&
bz!!�@��p�A���Ib���B�kA���XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�Y�e�A����1�&
bz)!
F@�e�A��LRb�"H��C��0,�YMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�ZP�f�A����1�&
bz!!�@P�f�A��LRb�"H��C��0,�ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�[��f�A����1�&
bz!!�@��f�A��LRb�"H��C��0,�[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�\�g�A����1�&
bz!!�@�g�A��LRb�"H��C��0,�\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�]�+g�A����1�&
bz!!�@�+g�A��LRb�"H��C��0,�]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�^���A����1�&
bz)!
F@���A��.b��$K��.��P^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�_z���A����1�&
bz!!�@z���A��.b��$K��.��P_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�`���A����1�&
bz!!�@���A��.b��$K��.��P`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�aK4��A����1�&
bz!!�@K4��A��.b��$K��.��PaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�b�C��A����1�&
bz!!�@�C��A��.b��$K��.��PbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�cSĦB����1�&
bz)!
F@SĦB��V"b��_D��m7��H�cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�d~l�B����1�&
bz!!�@~l�B��V"b��_D��m7��H�dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�e�n�B����1�&
bz!!�@�n�B��V"b��_D��m7��H�eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�f�B����1�&
bz!!�@�B��V"b��_D��m7��H�fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�gE��B����1�&
bz!!�@E��B��V"b��_D��m7��H�gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�h(��(����1�&
bz)!
F@(��(��L�b�0hL���8&_<�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�i\0�(����1�&
bz!!�@\0�(��L�b�0hL���8&_<�iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�j2�(����1�&
bz!!�@2�(��L�b�0hL���8&_<�jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�k8��(����1�&
bz!!�@8��(��L�b�0hL���8&_<�kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�lR��(����1�&
bz!!�@R��(��L�b�0hL���8&_<�lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�m�/WF����1�&
bz)!
F@�/WF����b�JN�@��<�mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�n�WF����1�&
bz!!�@�WF����b�JN�@��<�nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�o��WF����1�&
bz!!�@��WF����b�JN�@��<�oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�pesXF����1�&
bz!!�@esXF����b�JN�@��<�pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�q'XF����1�&
bz!!�@'XF����b�JN�@��<�qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�r��y������1�&
bz)!
F@��y����:b��C�鹙��8�rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�s��z������1�&
bz!!�@��z����:b��C�鹙��8�sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�t1�z������1�&
bz!!�@1�z����:b��C�鹙��8�tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�uX{������1�&
bz!!�@X{����:b��C�鹙��8�uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�v�d{������1�&
bz!!�@�d{����:b��C�鹙��8�vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�w`������1�&
bz)!
F@`����h�b�2�B�^�Z4�wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�x;E�����1�&
bz!!�@;E���h�b�2�B�^�Z4�xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�ycG�����1�&
bz!!�@cG���h�b�2�B�^�Z4�yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�zv������1�&
bz!!�@v����h�b�2�B�^�Z4�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�{������1�&
bz!!�@����h�b�2�B�^�Z4�{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**�|�s������1�&
bz)!
F@�s������b�4�1M����$H�|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}rdpudd.dll�**�}&`t������1�&
bz!!�@&`t������b�4�1M����$H�}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**�~Jbt������1�&
bz!!�@Jbt������b�4�1M����$H�~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
���1�&
bzElfChnk����Suc�Q`v���=�����f?�m�MF���O���5�**8��t������1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@��t������b�4�1M����$H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VO��V��NW=�7_� ����vD�	EventDataA��S���oData3=TransportProtocolName
A���=Port
UDP=
**8**����t������1�&
bz!!�@��t������b�4�1M����$H��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
**�**@���|������1�&
bz�!
F@��|������b�o�J���}A,��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����������=Z_hUe�7MR��FvA��9�+=DisplayDriverName
rdpudd.dll@**��']}������1�&
bz!!�@']}������b�o�J���}A,��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��Ra}������1�&
bz!!�@Ra}������b�o�J���}A,��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��G�}������1�&
bz!!�@G�}������b�o�J���}A,��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��[�}������1�&
bz!!�@[�}������b�o�J���}A,��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���n�n����1�&
bz)!
F@�n�n���b�}*�M���`q��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���1�n����1�&
bz!!�@�1�n���b�}*�M���`q��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��v4�n����1�&
bz!!�@v4�n���b�}*�M���`q��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��K��n����1�&
bz!!�@K��n���b�}*�M���`q��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��D��n����1�&
bz!!�@D��n���b�}*�M���`q��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��hǵ�����1�&
bz)!
F@hǵ����b�YΜI��=��D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���x������1�&
bz!!�@�x�����b�YΜI��=��D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��|������1�&
bz!!�@|�����b�YΜI��=��D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��%�������1�&
bz!!�@%������b�YΜI��=��D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���������1�&
bz!!�@������b�YΜI��=��D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��"Z_�}����1�&
bz)!
F@"Z_�}���!b�.1�J��c�4t�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���1`�}����1�&
bz!!�@�1`�}���!b�.1�J��c�4t�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��x4`�}����1�&
bz!!�@x4`�}���!b�.1�J��c�4t�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**����`�}����1�&
bz!!�@��`�}���!b�.1�J��c�4t�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����`�}����1�&
bz!!�@��`�}���!b�.1�J��c�4t�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**�����}����1�&
bz)!
F@���}��(�b�R�O�]%W�HD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**������}����1�&
bz!!�@����}��(�b�R�O�]%W�HD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��d���}����1�&
bz!!�@d���}��(�b�R�O�]%W�HD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��$-��}����1�&
bz!!�@$-��}��(�b�R�O�]%W�HD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���<��}����1�&
bz!!�@�<��}��(�b�R�O�]%W�HD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���m+������1�&
bz)!
F@�m+����Gyb��g�B���ݴ ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���-,������1�&
bz!!�@�-,����Gyb��g�B���ݴ ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���/,������1�&
bz!!�@�/,����Gyb��g�B���ݴ ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��{�,������1�&
bz!!�@{�,����Gyb��g�B���ݴ ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����,������1�&
bz!!�@��,����Gyb��g�B���ݴ ��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���������1�&
bz)!
F@�����B9b�_{L�I6;�S`�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���������1�&
bz!!�@�����B9b�_{L�I6;�S`�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��$������1�&
bz!!�@$����B9b�_{L�I6;�S`�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��������1�&
bz!!�@����B9b�_{L�I6;�S`�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��������1�&
bz!!�@����B9b�_{L�I6;�S`�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��r<U����1�&
bz)!
F@r<U���Xb��!~@�f`�;�X,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��a�<U����1�&
bz!!�@a�<U���Xb��!~@�f`�;�X,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��C�<U����1�&
bz!!�@C�<U���Xb��!~@�f`�;�X,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���R=U����1�&
bz!!�@�R=U���Xb��!~@�f`�;�X,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��:`=U����1�&
bz!!�@:`=U���Xb��!~@�f`�;�X,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��"�x����1�&
bz)!
F@"�x��\!b�0�@���<F�@��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**�����x����1�&
bz!!�@���x��\!b�0�@���<F�@��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��X��x����1�&
bz!!�@X��x��\!b�0�@���<F�@��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���.�x����1�&
bz!!�@�.�x��\!b�0�@���<F�@��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���<�x����1�&
bz!!�@�<�x��\!b�0�@���<F�@��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��{UѤ^���1�&
bz)!
F@{UѤ^�,�b�u�H�X����,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���Ҥ^���1�&
bz!!�@�Ҥ^�,�b�u�H�X����,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��Ҥ^���1�&
bz!!�@Ҥ^�,�b�u�H�X����,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**����Ҥ^���1�&
bz!!�@��Ҥ^�,�b�u�H�X����,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����Ҥ^���1�&
bz!!�@��Ҥ^�,�b�u�H�X����,�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���z��^���1�&
bz)!
F@�z��^�Eb�U#oJ�SN5H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���0��^���1�&
bz!!�@�0��^�Eb�U#oJ�SN5H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��73��^���1�&
bz!!�@73��^�Eb�U#oJ�SN5H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��%���^���1�&
bz!!�@%���^�Eb�U#oJ�SN5H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**�����^���1�&
bz!!�@���^�Eb�U#oJ�SN5H�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��2Z���1�&
bz)!
F@2Z�o]b�PN����.�0��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���>Z���1�&
bz!!�@�>Z�o]b�PN����.�0��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��gBZ���1�&
bz!!�@gBZ�o]b�PN����.�0��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��
�Z���1�&
bz!!�@
�Z�o]b�PN����.�0��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����Z���1�&
bz!!�@��Z�o]b�PN����.�0��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���|�:"���1�&
bz)!
F@�|�:"�o3b�9B��A���T��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��e>�:"���1�&
bz!!�@e>�:"�o3b�9B��A���T��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��CA�:"���1�&
bz!!�@CA�:"�o3b�9B��A���T��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**����:"���1�&
bz!!�@��:"�o3b�9B��A���T��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��B��:"���1�&
bz!!�@B��:"�o3b�9B��A���T��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���_"���1�&
bz)!
F@�_"���b�[�}D�Pvs�\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���h_"���1�&
bz!!�@�h_"���b�[�}D�Pvs�\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��k_"���1�&
bz!!�@k_"���b�[�}D�Pvs�\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��Z�_"���1�&
bz!!�@Z�_"���b�[�}D�Pvs�\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����_"���1�&
bz!!�@��_"���b�[�}D�Pvs�\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��e���2���1�&
bz)!
F@e���2��ib�f�
N�dL��W8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��a���2���1�&
bz!!�@a���2��ib�f�
N�dL��W8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**������2���1�&
bz!!�@����2��ib�f�
N�dL��W8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��G<��2���1�&
bz!!�@G<��2��ib�f�
N�dL��W8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��K��2���1�&
bz!!�@K��2��ib�f�
N�dL��W8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����&�2���1�&
bz)!
F@��&�2�<Gb��EhC���-a�\ �Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���&�2���1�&
bz!!�@�&�2�<Gb��EhC���-a�\ �Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��p�&�2���1�&
bz!!�@p�&�2�<Gb��EhC���-a�\ �Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��(3	&�2���1�&
bz!!�@(3	&�2�<Gb��EhC���-a�\ �Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��[@	&�2���1�&
bz!!�@[@	&�2�<Gb��EhC���-a�\ �Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��2��Cs=���1�&
bz)!
F@2��Cs=��b�KC��+�<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**�����Cs=���1�&
bz!!�@���Cs=��b�KC��+�<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**�����Cs=���1�&
bz!!�@���Cs=��b�KC��+�<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��y�Cs=���1�&
bz!!�@y�Cs=��b�KC��+�<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��t�Cs=���1�&
bz!!�@t�Cs=��b�KC��+�<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��*��ks=���1�&
bz)!
F@*��ks=��vb�p�I��)Cp�X�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��@Y�ks=���1�&
bz!!�@@Y�ks=��vb�p�I��)Cp�X�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���[�ks=���1�&
bz!!�@�[�ks=��vb�p�I��)Cp�X�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���сks=���1�&
bz!!�@�сks=��vb�p�I��)Cp�X�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���݁ks=���1�&
bz!!�@�݁ks=��vb�p�I��)Cp�X�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��DA��?���1�&
bz)!
F@DA��?�~
b��3M��p5|Xd�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���쁐?���1�&
bz!!�@�쁐?�~
b��3M��p5|Xd�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���?���1�&
bz!!�@�?�~
b��3M��p5|Xd�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���]��?���1�&
bz!!�@�]��?�~
b��3M��p5|Xd�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��ll��?���1�&
bz!!�@ll��?�~
b��3M��p5|Xd�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����?�H���1�&
bz)!
F@��?�H�9b�x�L��I��jP��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**�����?�H���1�&
bz!!�@���?�H�9b�x�L��I��jP��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**�����?�H���1�&
bz!!�@���?�H�9b�x�L��I��jP��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��F�?�H���1�&
bz!!�@F�?�H�9b�x�L��I��jP��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���T�?�H���1�&
bz!!�@�T�?�H�9b�x�L��I��jP��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��zd�H���1�&
bz)!
F@zd�H���b�r��C��7*.�P�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���zd�H���1�&
bz!!�@�zd�H���b�r��C��7*.�P�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��W�zd�H���1�&
bz!!�@W�zd�H���b�r��C��7*.�P�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���c{d�H���1�&
bz!!�@�c{d�H���b�r��C��7*.�P�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��s{d�H���1�&
bz!!�@s{d�H���b�r��C��7*.�P�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**�����OEI���1�&
bz)!
F@���OEI���b�Y�E�V�l����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��~��OEI���1�&
bz!!�@~��OEI���b�Y�E�V�l����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**�����OEI���1�&
bz!!�@���OEI���b�Y�E�V�l����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���5�OEI���1�&
bz!!�@�5�OEI���b�Y�E�V�l����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��hH�OEI���1�&
bz!!�@hH�OEI���b�Y�E�V�l����Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���nC�EI���1�&
bz)!
F@�nC�EI���b�v�~D���0T0�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���$D�EI���1�&
bz!!�@�$D�EI���b�v�~D���0T0�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��](D�EI���1�&
bz!!�@](D�EI���b�v�~D���0T0�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**����D�EI���1�&
bz!!�@��D�EI���b�v�~D���0T0�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��]�D�EI���1�&
bz!!�@]�D�EI���b�v�~D���0T0�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**�����y�K���1�&
bz)!
F@���y�K��Lb�V.nL�=��D�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**���O�y�K���1�&
bz!!�@�O�y�K��Lb�V.nL�=��D�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��DR�y�K���1�&
bz!!�@DR�y�K��Lb�V.nL�=��D�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��G��y�K���1�&
bz!!�@G��y�K��Lb�V.nL�=��D�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**�����y�K���1�&
bz!!�@���y�K��Lb�V.nL�=��D�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���!1@|S���1�&
bz)!
F@�!1@|S�q�b���M�Ȩ�&D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**����1@|S���1�&
bz!!�@��1@|S�q�b���M�Ȩ�&D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��H�1@|S���1�&
bz!!�@H�1@|S�q�b���M�Ȩ�&D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��HV2@|S���1�&
bz!!�@HV2@|S�q�b���M�Ȩ�&D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**��|h2@|S���1�&
bz!!�@|h2@|S�q�b���M�Ȩ�&D��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**���6�d|S���1�&
bz)!
F@�6�d|S���b�.�	H�s��N�8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����rdpudd.dll�**��D��d|S���1�&
bz!!�@D��d|S���b�.�	H�s��N�8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**���d|S���1�&
bz!!�@��d|S���b�.�	H�s��N�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOTCP=
�**��t�d|S���1�&
bz!!�@�t�d|S���b�.�	H�s��N�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**����d|S���1�&
bz!!�@���d|S���b�.�	H�s��N�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��VOUDP=
�**p|m�cW���1�&
bz�!�@|m�cW��� �ʒ�I���Xx�8	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]��&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
 TCP10.0.1.72:53300p**8��cW���1�&
bz�!
A@��cW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj����Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**@���cW���1�&
bz�!
H@���cW��� �ʒ�I���Xx�8�jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs5��qMs��_����=jD��8vA��+�=
MethodName
"PrepareForAccept@��1�&
bzElfChnk���x�x�S�0P��v���=�����f?�m�MF�j�mS
��I�]#�Ud���%=�u�Ea**��cW���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!
H@��cW��� �ʒ�I���Xx�8�jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO�qMs��_����=jr��fvD�	EventDataA��=���oData=
MethodName
SendPolicyData** ���cW���1�&
bzs!�@���cW��� �ʒ�I���Xx�8�jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���
�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **8�fW���1�&
bzi!�@8�fW��� �ʒ�I���Xx�8�XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2��b�2Y`X+L�
Wl��:��.vA��!�=error
@dll**�	9�fW���1�&
bz!�@9�fW��� �ʒ�I���Xx�8�w	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@�**(
��fW���1�&
bzy!�@��fW��� �ʒ�I���Xx�8�w
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�����*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�z(**�Q4�fW���1�&
bz1!
H@Q4�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOOnDisconnectedF�**��;�fW���1�&
bz9!f@�;�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��LNc�T�� �����vn����**�
\B�fW���1�&
bz�!�@\B�fW��� �ʒ�I���Xx�8�
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
teDe�**`�B�fW���1�&
bz�!�@�B�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=V�4��C�[i/1��R�t��hvA��-�=ChannelName
A��'�=TunnelID
rdpinpt`**��B�fW���1�&
bz)!�@�B�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpcmd��1�&�**�B�fW���1�&
bza!�@�B�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=FMicrosoft::Windows::RDS::CoreInput**�)C�fW���1�&
bz)!�@)C�fW��� �ʒ�I���Xx�8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdplicb�**p^�iW���1�&
bz�!�@^�iW�i� �+�I�㙒ݸ8	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]]#&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
 TCP10.0.1.72:53301esp**8��iW���1�&
bz�!
A@��iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��%�Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#0Ser8**����iW���1�&
bz5!
H@���iW�i� �+�I�㙒ݸ8fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"PrepareForAcceptRd�**���iW���1�&
bz1!
H@��iW�i� �+�I�㙒ݸ8fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOSendPolicyDatapCor�**�"�iW���1�&
bz!�@"�iW�i� �+�I�㙒ݸ8fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���
e�**�(Z�iW���1�&
bz!�@(Z�iW�i� �+�I�㙒ݸ8�wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@o�**XF[�iW���1�&
bz�!�@F[�iW�i� �+�I�㙒ݸ8�wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�X**��]�iW���1�&
bz!�@�]�iW�i� �+�I�㙒ݸ8�XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@�**��d�iW���1�&
bz1!
H@�d�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOOnDisconnectedd����**�$e�iW���1�&
bz!f@$e�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**�8e�iW���1�&
bz'!�@8e�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW���**�\e�iW���1�&
bz+!�@\e�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpinpt**�**�{e�iW���1�&
bz)!�@{e�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpcmd**�**�e�iW���1�&
bza!�@�e�iW�i� �+�I�㙒ݸ8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=FMicrosoft::Windows::RDS::CoreInput**� �e�iW���1�&
bz)!�@�e�iW�i� �+�I�㙒ݸ8� Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdplic�**�!�W
kW���1�&
bz?!�@�W
kW�щ �/�I�'E#8	!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]]# TCP10.0.1.72:53302�**�"�
kW���1�&
bz'!
A@�
kW�щ �/�I�'E#8�"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��%RDP-Tcp#0�**�#��
kW���1�&
bz5!
H@��
kW�щ �/�I�'E#8�X#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"PrepareForAcceptz�**�$��
kW���1�&
bz1!
H@��
kW�щ �/�I�'E#8�X$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOSendPolicyData��**�%��
kW���1�&
bz!�@��
kW�щ �/�I�'E#8�X%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���
�**h&&kW���1�&
bz�!e@&kW�щ �/�I�'E#8�&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^�I�
�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).sh**�'�&kW���1�&
bz)!�@�&kW�щ �/�I�'E#8�'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdplic-Rdp�**�(�&kW���1�&
bz)!�@�&kW�щ �/�I�'E#8�(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpcmd-Rdp�**�)I'kW���1�&
bz5!
H@I'kW�щ �/�I�'E#8�)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"OnStartLicensing�9�**�*.)kW���1�&
bz5!
H@.)kW�щ �/�I�'E#8�X*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"AcceptConnectionMi�**0+p?kW���1�&
bz�!h@p?kW�щ �/�I�'E#8�X+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�mS�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]TS/0**�,�?kW���1�&
bz�!
G@�?kW�щ �/�I�'E#8�X,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���U@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDDz�**�-MAkW���1�&
bzA!
H@MAkW�щ �/�I�'E#8�X-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO.GetSecurityFilterCredsx��\!�**�.�hkW���1�&
bz7!
H@�hkW�щ �/�I�'E#8�X.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO$SendClientLicense�**�/�hkW���1�&
bz5!
H@�hkW�щ �/�I�'E#8�X/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"ProtocolComplete�**�0~mkW���1�&
bz!b@~mkW�щ �/�I�'E#80	0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�X�**�1�mkW���1�&
bz!d@�mkW�щ �/�I�'E#80	1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**�2�tkW���1�&
bz!�@�tkW�щ �/�I�'E#80	2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����EaO����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)to�**3S�kW���1�&
bzo!�@S�kW�щ �/�I�'E#80	3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��kd��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**�4��kW���1�&
bzK!
H@��kW�щ �/�I�'E#8�X4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO8AuthenticateClientToSession**�**�5P��kW���1�&
bzC!�@P��kW�щ �/�I�'E#8p	5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]]#$UDP[10.0.1.72]:56248�**p6�&�kW���1�&
bz�!
B@�&�kW�щ �/�I�'E#8�w6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����j������\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0Micp**�7r��kW���1�&
bz+!�@r��kW�щ �/�I�'E#8\D7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpgrfxoso�**�8^��kW���1�&
bz!!@^��kW�щ �/�I�'E#8�w8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**9z��kW���1�&
bzQ!
H@z��kW�щ �/�I�'E#8�w9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO>Waiting for graphics subsystemws-R**�:���kW���1�&
bz+!�@���kW�щ �/�I�'E#8�:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpinpts-R�**�;��kW���1�&
bz#!�@��kW�щ �/�I�'E#8�;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����EaUDPs-R�**�<��kW���1�&
bz�!�@��kW�щ �/�I�'E#8�<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��u)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�VO�**�=�
�kW���1�&
bz+!
H@�
�kW�щ �/�I�'E#8�=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOOnConnected�**�>�
�kW���1�&
bz#!
H@�
�kW�щ �/�I�'E#8�>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOOnReady�**�?#&�kW���1�&
bz#!�@#&�kW�щ �/�I�'E#8�X?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����EaUDP�VO�**@I'�kW���1�&
bza!�@I'�kW�щ �/�I�'E#8�X@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=FMicrosoft::Windows::RDS::CoreInput"�**Aq'�kW���1�&
bze!�@q'�kW�щ �/�I�'E#8�XAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=JMicrosoft::Windows::RDS::MouseCursor**B6*�kW���1�&
bz_!�@6*�kW�щ �/�I�'E#8�XBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=DMicrosoft::Windows::RDS::GraphicsP**C��+lW���1�&
bzi!�@��+lW�щ �/�I�'E#8�XCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC****(D��.lW���1�&
bz{!�@��.lW�щ �/�I�'E#8�wDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=`Microsoft::Windows::RDS::Video::Control::v08.01(** E-�.lW���1�&
bzu!�@-�.lW�щ �/�I�'E#8�wEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=ZMicrosoft::Windows::RDS::Video::Data::v08.01 **Fh�.lW���1�&
bzo!�@h�.lW�щ �/�I�'E#8�wFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01p**�G51lW���1�&
bzI!
H@51lW�щ �/�I�'E#8�wGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO6ConnectNotify(SessionId=1)Core�**�HS�5lW���1�&
bz'!�@S�5lW�щ �/�I�'E#8�%HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpdre�**�I�u7lW���1�&
bzA!�@�u7lW�щ �/�I�'E#8�zIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=&AUDIO_PLAYBACK_DVCcros�**�J�V8lW���1�&
bzM!�@�V8lW�щ �/�I�'E#8�wJMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=2AUDIO_PLAYBACK_LOSSY_DVCDe�**K`8lW���1�&
bzS!�@`8lW�щ �/�I�'E#809KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=8TextInput_ServerToClientDVCTS/**L�b8lW���1�&
bzS!�@�b8lW�щ �/�I�'E#8�LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=8TextInput_ServerToClientDVC**M�+ClW���1�&
bzo!�@�+ClW�щ �/�I�'E#8�wMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01**N0�JlW���1�&
bzQ!�@0�JlW�щ �/�I�'E#8�XNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=6RDCamera_Device_Enumerator**O��MlW���1�&
bzY!�@��MlW�щ �/�I�'E#8�VOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=>Microsoft::Windows::RDS::Input�KC��**P��MlW���1�&
bzY!�@��MlW�щ �/�I�'E#8�PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=>Microsoft::Windows::RDS::Inputroso**Q/�QlW���1�&
bz[!�@/�QlW�щ �/�I�'E#8�XQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=@Microsoft::Windows::RDS::Notifyerv**R.�QlW���1�&
bz[!�@.�QlW�щ �/�I�'E#8�RMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=@Microsoft::Windows::RDS::Notifyros**Sg�SlW���1�&
bzk!�@g�SlW�щ �/�I�'E#8�XSMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=PMicrosoft::Windows::RDS::DisplayControl-Rd**T2�UlW���1�&
bz_!�@2�UlW�щ �/�I�'E#8�XTMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=DMicrosoft::Windows::RDS::Location**U��UlW���1�&
bz_!�@��UlW�щ �/�I�'E#8�UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=DMicrosoft::Windows::RDS::Locationk**�V2@�lW���1�&
bz+!�@2@�lW�щ �/�I�'E#809VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=cliprdr�**�W1{�lW���1�&
bz'!�@1{�lW�щ �/�I�'E#8�zWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=XPSRD�**�XndmW���1�&
bzE!
H@ndmW�щ �/�I�'E#8�wXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO2LogonNotify(SessionId=1)�**PY]�~mW���1�&
bz�!�@]�~mW�щ �/�I�'E#8�rYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���
�,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**Z�mW���1�&
bzo!�@�mW�щ �/�I�'E#8�zZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01**[lb�mW���1�&
bzo!�@lb�mW�щ �/�I�'E#8�w[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01**\�mW���1�&
bzo!�@�mW�щ �/�I�'E#8�z\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01c**]�H�mW���1�&
bzo!�@�H�mW�щ �/�I�'E#8�w]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01v**�^�O�mW���1�&
bz'!�@�O�mW�щ �/�I�'E#8�w^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=XPSRDv�**�_ĽZnW���1�&
bz'!�@ĽZnW�щ �/�I�'E#809_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=XPSRDv�**`��]nW���1�&
bzo!�@��]nW�щ �/�I�'E#809`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01d**aP_nW���1�&
bzo!�@P_nW�щ �/�I�'E#8�zaMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01/**�b�oW���1�&
bz'!�@�oW�щ �/�I�'E#8�VbMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=XPSRDr�**�c]D@�W���1�&
bz5!
H@]D@�W�щ �/�I�'E#8�zcMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"PreDisconnect(5)�**�d�D@�W���1�&
bz7!
H@�D@�W�щ �/�I�'E#8�zdMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO$SetErrorInfo(0x5)�**�e�*N�W���1�&
bz5!
H@�*N�W�щ �/�I�'E#8�zeMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO"DisconnectNotify�**�f+N�W���1�&
bzI!
H@+N�W�щ �/�I�'E#8�zfMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO6GetServerAutoReconnectInfo�**�g(Sa�W���1�&
bzI!
H@(Sa�W�щ �/�I�'E#8�zgMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsO6GetServerAutoReconnectInfo�** h�Sa�W���1�&
bzs!g@�Sa�W�щ �/�I�'E#8�zhMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�z�|���z�|X�,T���p�D��8vA��+�=
ReasonCode
 **�iW9b�W���1�&
bz!�@W9b�W�щ �/�I�'E#8�wiMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@�**Xj\:b�W���1�&
bz�!�@\:b�W�щ �/�I�'E#8�wjMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�X**�k�Kb�W���1�&
bz'!�@�Kb�W�щ �/�I�'E#8�kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpdr�**�l��b�W���1�&
bz!�@��b�W�щ �/�I�'E#8�slMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@�**ms�b�W���1�&
bzU!
H@s�b�W�щ �/�I�'E#8�mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsOBOnDisconnected(server initiated)**�n�c�W���1�&
bz!f@�c�W�щ �/�I�'E#8�nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**�o�c�W���1�&
bz'!�@�c�W�щ �/�I�'E#8�oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW���**�p�c�W���1�&
bz+!�@�c�W�щ �/�I�'E#8�pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpinpt�**�q�c�W���1�&
bz)!�@�c�W�щ �/�I�'E#8�qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpcmd�**r�c�W���1�&
bza!�@�c�W�щ �/�I�'E#8�rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=FMicrosoft::Windows::RDS::CoreInput**�sk	c�W���1�&
bz)!�@k	c�W�щ �/�I�'E#8�sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdplic�**�t�	c�W���1�&
bz+!�@�	c�W�щ �/�I�'E#8�tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpgrfx�**�uLc�W���1�&
bz+!�@Lc�W�щ �/�I�'E#8�uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=railenc�**8v�c�W���1�&
bz�!�@�c�W�щ �/�I�'E#8�vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=nMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**w�c�W���1�&
bz_!�@�c�W�щ �/�I�'E#8�wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=DMicrosoft::Windows::RDS::Graphics**x$c�W���1�&
bze!�@$c�W�щ �/�I�'E#8�xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=JMicrosoft::Windows::RDS::MouseCursor**�yIc�W���1�&
bz%!�@Ic�W�щ �/�I�'E#8�yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=
ECHO�**�z� c�W���1�&
bzA!�@� c�W�щ �/�I�'E#8�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=&AUDIO_PLAYBACK_DVC�**�{�$c�W���1�&
bzM!�@�$c�W�щ �/�I�'E#8�{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=2AUDIO_PLAYBACK_LOSSY_DVC�**|J)c�W���1�&
bzo!�@J)c�W�щ �/�I�'E#8�|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=TMicrosoft::Windows::RDS::Geometry::v08.01**�}�)c�W���1�&
bz'!�@�)c�W�щ �/�I�'E#8�}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpdr�**�~*c�W���1�&
bz)!�@*c�W�щ �/�I�'E#8�~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=rdpsnd�**��2c�W���1�&
bz+!�@�2c�W�щ �/�I�'E#8�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=cliprdr�**�T3c�W���1�&
bzQ!�@T3c�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�=6RDCamera_Device_Enumerator��1�&
bzElfChnk�����p�X�5�m��V�v���=�����f?�m�MF�g�mP��Fu)u�R�b����O]�r=1E^**p�q<c�W���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz%!�@q<c�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
PMicrosoft::Windows::RDS::DisplayControlp**��BHc�W���1�&
bz'!�@BHc�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDf�**���fc�W���1�&
bz'!�@�fc�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��vc�W���1�&
bz'!�@vc�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**��l�c�W���1�&
bz'!�@l�c�W�щ �/�I�'E#8��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**@��*��W���1�&
bz�!
F@�*��W��(b�,��N��&��tP�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����]������=Z_hUe�7MR��FvA��9�+=DisplayDriverName
rdpudd.dll@**h�W���W���1�&
bz�!�@W���W��(b�,��N��&��tP�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V���V��NW=�7_� ���tvA��A�3=TransportProtocolName
A���=Port
TCP=
h**��i���W���1�&
bz!!�@i���W��(b�,��N��&��tP�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�TCP=
�**���p��W���1�&
bz!!�@�p��W��(b�,��N��&��tP�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**��{���W���1�&
bz!!�@{���W��(b�,��N��&��tP�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��V�UDP=
�**p�-E��(W���1�&
bz�!�@-E��(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]u&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
 TCP10.0.1.72:58093p**8�ԓ��(W���1�&
bz�!
A@ԓ��(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj���Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**@�]���(W���1�&
bz�!
H@]���(W�<� ��TO�*��bt��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!�qMs��_����=jD��8vA��+�=
MethodName
"PrepareForAccept@**������(W���1�&
bz1!
H@����(W�<� ��TO�*��bt��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!SendPolicyData�** �n���(W���1�&
bzs!�@n���(W�<� ��TO�*��bt��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S��=%�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **�:�x�(W���1�&
bzi!�@:�x�(W�<� ��TO�*��bt�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2]'�b�2Y`X+L�
Wl��:��.vA��!�=error
@**(�L�x�(W���1�&
bzy!�@L�x�(W�<� ��TO�*��bt�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*u)]'���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**��n�x�(W���1�&
bz!�@n�x�(W�<� ��TO�*��bt@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2]'@�**��,�x�(W���1�&
bz1!
H@,�x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!OnDisconnected�**��A�x�(W���1�&
bz9!f@A�x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L=1�LNc�T�� �����v�**����x�(W���1�&
bz�!�@��x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��%3W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**��@�x�(W���1�&
bz+!�@@�x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**��~�x�(W���1�&
bz)!�@~�x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**���x�(W���1�&
bza!�@��x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��<�x�(W���1�&
bz)!�@<�x�(W�<� ��TO�*��bt�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��դq�(W���1�&
bz?!�@դq�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]u TCP10.0.1.72:58108�**��@cr�(W���1�&
bz'!
A@@cr�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��RDP-Tcp#0�**��4�r�(W���1�&
bz5!
H@4�r�(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"PrepareForAccept�**��x�r�(W���1�&
bz1!
H@x�r�(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!SendPolicyData�**����r�(W���1�&
bz!�@��r�(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S��=%�**h�bk��(W���1�&
bz�!e@bk��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^�F=%�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**���m��(W���1�&
bz)!�@�m��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��n��(W���1�&
bz)!�@n��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**��p��(W���1�&
bz5!
H@p��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"OnStartLicensing�**��Ju��(W���1�&
bz5!
H@Ju��(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"AcceptConnection�**0�n���(W���1�&
bz�!h@n���(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�mP�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**������(W���1�&
bz�!
G@����(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���R@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**��/���(W���1�&
bzA!
H@/���(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!.GetSecurityFilterCreds�**��c��(W���1�&
bz7!
H@c��(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!$SendClientLicense�**��V
��(W���1�&
bz5!
H@V
��(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"ProtocolComplete�**�����(W���1�&
bz!b@���(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L=1�**�����(W���1�&
bz!d@���(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L=1�**��\+��(W���1�&
bz!�@\+��(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����E^!����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**��:��(W���1�&
bzK!
H@:��(W�� �&��@��qB��tI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!8AuthenticateClientToSession�**�o���(W���1�&
bzo!�@o���(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�b��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**��j��(W���1�&
bzC!�@j��(W�� �&��@��qB��t$
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]u$UDP[10.0.1.72]:62818�**p��Z��(W���1�&
bz�!
B@�Z��(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����g%3�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**���5��(W���1�&
bz+!�@�5��(W�� �&��@��qB��t)�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**���6��(W���1�&
bz!!@�6��(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L=1�**�7��(W���1�&
bzQ!
H@7��(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!>Waiting for graphics subsystem**��M��(W���1�&
bz+!�@M��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**��tU��(W���1�&
bz#!�@tU��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����E^UDP�**���X��(W���1�&
bz�!�@�X��(W�� �&��@��qB��tX�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��r)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**���p��(W���1�&
bz+!
H@�p��(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!OnConnected�**���p��(W���1�&
bz#!
H@�p��(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!OnReady�**��I.��(W���1�&
bz#!�@I.��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����E^UDP�**�o0��(W���1�&
bza!�@o0��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��0��(W���1�&
bze!�@�0��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**��3��(W���1�&
bz_!�@�3��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**���-�(W���1�&
bzi!�@��-�(W�� �&��@��qB��t�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**(��/�(W���1�&
bz{!�@�/�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01(** ���/�(W���1�&
bzu!�@��/�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01 **���/�(W���1�&
bzo!�@��/�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**���o2�(W���1�&
bzI!
H@�o2�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!6ConnectNotify(SessionId=1)�**���7�(W���1�&
bz'!�@�7�(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��n�8�(W���1�&
bzA!�@n�8�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**��k�9�(W���1�&
bzM!�@k�9�(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**��M:�(W���1�&
bzS!�@�M:�(W�� �&��@��qB��t�N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�eO:�(W���1�&
bzS!�@eO:�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�ʴC�(W���1�&
bzo!�@ʴC�(W�� �&��@��qB��t�N�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�$/I�(W���1�&
bzQ!�@$/I�(W�� �&��@��qB��t�I�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**�I;J�(W���1�&
bzY!�@I;J�(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**�AJ�(W���1�&
bzY!�@AJ�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**�8�J�(W���1�&
bz[!�@8�J�(W�� �&��@��qB��t�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**�KK�(W���1�&
bz[!�@KK�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**��-Q�(W���1�&
bzk!�@�-Q�(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**�2�X�(W���1�&
bz_!�@2�X�(W�� �&��@��qB��t�
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**�a�X�(W���1�&
bz_!�@a�X�(W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**���]�(W���1�&
bz+!�@�]�(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**�����(W���1�&
bz'!�@���(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**P��.��(W���1�&
bz�!�@�.��(W�� �&��@��qB��t�/�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,����,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**��R��(W���1�&
bzE!
H@R��(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!2LogonNotify(SessionId=1)�**��}��(W���1�&
bzo!�@�}��(W�� �&��@��qB��t�I�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**���(W���1�&
bzo!�@��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��F{��(W���1�&
bz'!�@F{��(W�� �&��@��qB��t�5�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���[�(W���1�&
bz'!�@�[�(W�� �&��@��qB��t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**������(W���1�&
bz'!�@����(W�� �&��@��qB��t@7�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���h��)W���1�&
bz5!
H@�h��)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"PreDisconnect(5)�**��ci��)W���1�&
bz7!
H@ci��)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!$SetErrorInfo(0x5)�**��ː��)W���1�&
bz5!
H@ː��)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!"DisconnectNotify�**������)W���1�&
bzI!
H@����)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!6GetServerAutoReconnectInfo�**�����)W���1�&
bzI!
H@���)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!6GetServerAutoReconnectInfo�** ����)W���1�&
bzs!g@���)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�z�|���z�|X�,T���p�D��8vA��+�=
ReasonCode
 **���$��)W���1�&
bz'!�@�$��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��ڀ��)W���1�&
bz!�@ڀ��)W�� �&��@��qB��t�F�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2]'@�**X����)W���1�&
bz�!�@���)W�� �&��@��qB��t�F�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*u)$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�X**��%���)W���1�&
bz!�@%���)W�� �&��@��qB��tD�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2]'@�**���)W���1�&
bzU!
H@��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs!BOnDisconnected(server initiated)**�����)W���1�&
bz!f@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L=1�**����)W���1�&
bz'!�@��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��%3�**��m��)W���1�&
bz+!�@m��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**�����)W���1�&
bz)!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**����)W���1�&
bza!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��!��)W���1�&
bz)!�@!��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��Q��)W���1�&
bz+!�@Q��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�����)W���1�&
bz+!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8����)W���1�&
bz�!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**�
��)W���1�&
bz_!�@
��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**�C��)W���1�&
bze!�@C��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**��[��)W���1�&
bz%!�@[��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHO�**�����)W���1�&
bzA!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�����)W���1�&
bzM!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**�i��)W���1�&
bzo!�@i��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�����)W���1�&
bz'!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��5��)W���1�&
bz)!�@5��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsnd�**�����)W���1�&
bz+!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**���)W���1�&
bzQ!�@��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**����)W���1�&
bzk!�@���)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**��[	��)W���1�&
bz'!�@[	��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���*��)W���1�&
bz'!�@�*��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��@B��)W���1�&
bz'!�@@B��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���K��)W���1�&
bz'!�@�K��)W�� �&��@��qB��t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���`�<[���1�&
bz=!�@�`�<[��u �N�$C�X2t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]uTCP10.8.0.6:55212���1�&
bz
A@m~�<[��u �N�$C�X2t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalElfChnk�v�v�p���>+^ϘRv���=�����f?�m�MF��Q�k;��=1�}'E=�MO]e]��H**�m~�<[���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!
A@m~�<[��u �N�$C�X2t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�O�Pj��#_}՘��0
�z��nvD�	EventDataA��E���oData%=ConnectionName
RDP-Tcp#0D
**@�=ϊ<[���1�&
bz�!
H@=ϊ<[��u �N�$C�X2tH�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
�qMs��_����=jD��8vA��+�=
MethodName
"PrepareForAccept**@**���ϊ<[���1�&
bz1!
H@�ϊ<[��u �N�$C�X2tH�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
SendPolicyDatavc��** �阋<[���1�&
bzs!�@阋<[��u �N�$C�X2tH�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S����S�����T�S8�F�UzD��8vA��+�=
InstanceID
b **���<[���1�&
bzi!�@���<[��u �N�$C�X2t<`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2��b�2Y`X+L�
Wl��:��.vA��!�=error
@**���<[���1�&
bz!�@��<[��u �N�$C�X2tX_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�@�**(���<[���1�&
bzy!�@���<[��u �N�$C�X2t<`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�����*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�W�(**�j	�<[���1�&
bz1!
H@j	�<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
OnDisconnected�**��<[���1�&
bz9!f@�<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��LNc�T�� �����v�**���<[���1�&
bz�!�@��<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�!
�**`m�<[���1�&
bz�!�@m�<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]V�4��C�[i/1��R�t��hvA��-�=ChannelName
A��'�=TunnelID
rdpinpt`**���<[���1�&
bz)!�@��<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpcmd�**��<[���1�&
bza!�@��<[��u �N�$C�X2t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]FMicrosoft::Windows::RDS::CoreInputb**�	��<[���1�&
bz)!�@��<[��u �N�$C�X2t�		Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdplicW��**p
�F�<[���1�&
bz�!�@�F�<[�� ��D����Tt�	
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]}'&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
TCP10.8.0.6:55213!p**�t�<[���1�&
bz'!
A@t�<[�� ��D����Tt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�ORDP-Tcp#0�**�ˤ�<[���1�&
bz5!
H@ˤ�<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"PrepareForAccept�**�
��<[���1�&
bz1!
H@��<[�� ��D����Tt�
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
SendPolicyDataW��**�ݿ�<[���1�&
bz!�@ݿ�<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S����**h��	<[���1�&
bz�!e@��	<[�� ��D����TtPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^=1��
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**����	<[���1�&
bz)!�@���	<[�� ��D����TtPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdplic=�**����	<[���1�&
bz)!�@���	<[�� ��D����TtPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpcmdeTS/�**���	<[���1�&
bz5!
H@��	<[�� ��D����TtPEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"OnStartLicensinger�**�̕�	<[���1�&
bz5!
H@̕�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"AcceptConnectionio�**0���	<[���1�&
bz�!h@���	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�;�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]rd0**�ѹ�	<[���1�&
bz�!
G@ѹ�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���E=@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD@@c�**��	<[���1�&
bzA!
H@�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
.GetSecurityFilterCredsI��**���	<[���1�&
bz7!
H@��	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
$SendClientLicense�**��	<[���1�&
bz5!
H@�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"ProtocolComplete��**���	<[���1�&
bz!b@��	<[�� ��D����Tt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**���	<[���1�&
bz!d@��	<[�� ��D����Tt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�t�**��$�	<[���1�&
bz!�@�$�	<[�� ��D����Tt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����H�
����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)do�**��7�	<[���1�&
bzK!
H@�7�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
8AuthenticateClientToSessiontop�**�J�	<[���1�&
bzo!�@�J�	<[�� ��D����Tt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�M��kŵmV�K&<�G�E@��4vA��'�=TunnelID
i**��	<[���1�&
bz'!
H@�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
PreCreate9�**pAK�	<[���1�&
bz�!
B@AK�	<[�� ��D����Tt�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���ύQ������\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0eDep**� g��	<[���1�&
bz!!@g��	<[�� ��D����Tt� Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�Ÿ**!~��	<[���1�&
bzQ!
H@~��	<[�� ��D����Tt�!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
>Waiting for graphics subsystemB��t**�"1��	<[���1�&
bz+!�@1��	<[�� ��D����Tt�3"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpgrfx��@���**�#��	<[���1�&
bz+!�@��	<[�� ��D����TtPE#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpinptW���**$y�	<[���1�&
bzW!�@y�	<[�� ��D����TtPE$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����H<TCP: Reason Code: 5 (Unknown)o**�%/�	<[���1�&
bz�!�@/�	<[�� ��D����TtPE%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`�e])�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PCVP�F�**�&�	<[���1�&
bz+!
H@�	<[�� ��D����Tt�	&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
OnConnectedndo�**�'-�	<[���1�&
bz#!
H@-�	<[�� ��D����Tt�	'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
OnReady�**(��	<[���1�&
bza!�@��	<[�� ��D����Tt^(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]FMicrosoft::Windows::RDS::CoreInput$
�**)Q�	<[���1�&
bze!�@Q�	<[�� ��D����Tt^)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]JMicrosoft::Windows::RDS::MouseCursorso***pS�	<[���1�&
bz_!�@pS�	<[�� ��D����Tt^*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]DMicrosoft::Windows::RDS::Graphics**�+M�	<[���1�&
bzA!�@M�	<[�� ��D����Tt$
+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]}'"UDP[10.8.0.6]:61868!�**,R.
<[���1�&
bzi!�@R.
<[�� ��D����TtX_,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4�k3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PCgrap**�-.0
<[���1�&
bzI!
H@.0
<[�� ��D����TtX_-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
6ConnectNotify(SessionId=3)t�**�.��K
<[���1�&
bz#!�@��K
<[�� ��D����TtX_.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����HUDPDP�**(/�^
<[���1�&
bz{!�@�^
<[�� ��D����TtX_/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]`Microsoft::Windows::RDS::Video::Control::v08.01	(** 0W�^
<[���1�&
bzu!�@W�^
<[�� ��D����TtX_0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]ZMicrosoft::Windows::RDS::Video::Data::v08.01io **1�^
<[���1�&
bzo!�@�^
<[�� ��D����TtX_1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01**�2�d
<[���1�&
bz'!�@�d
<[�� ��D����Tt^2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpdr�**�3���
<[���1�&
bzA!�@���
<[�� ��D����Tt^3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]&AUDIO_PLAYBACK_DVCnput�**�4�˘
<[���1�&
bzM!�@�˘
<[�� ��D����Tt^4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]2AUDIO_PLAYBACK_LOSSY_DVCRD�**�5Q�
<[���1�&
bz5!
H@Q�
<[�� ��D����TtX_5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"PreDisconnect(0)D�**�6��
<[���1�&
bz7!
H@��
<[�� ��D����TtX_6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
$SetErrorInfo(0x0)/�**7�<�
<[���1�&
bzQ!�@�<�
<[�� ��D����Tt�'7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]6RDCamera_Device_Enumerator{!**�8���
<[���1�&
bz5!
H@���
<[�� ��D����Tt�'8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"DisconnectNotify�**�9%��
<[���1�&
bzI!
H@%��
<[�� ��D����Tt�'9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
6GetServerAutoReconnectInfo**�**�:�<[���1�&
bz'!�@�<[�� ��D����Tt�	:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpdrn�**�;�u<[���1�&
bzA!�@�u<[�� ��D����Tt�';Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]&AUDIO_PLAYBACK_DVC�qMs!�**�<�x<[���1�&
bzM!�@�x<[�� ��D����Tt�'<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]2AUDIO_PLAYBACK_LOSSY_DVCO�**=vy<[���1�&
bzQ!�@vy<[�� ��D����Tt�'=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]6RDCamera_Device_Enumerator_DVC**�>Z
L<[���1�&
bz/!
B@Z
L<[�� ��D����TtX_>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���ύQRDP-Tcp#0_�**�?[;U<[���1�&
bzI!
H@[;U<[�� ��D����Tt�'?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
6ConnectNotify(SessionId=1)xtIn�**�@�j<[���1�&
bz'!�@�j<[�� ��D����Tt�'@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpdrr�**A�<[���1�&
bzS!�@�<[�� ��D����Tt�AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]8TextInput_ServerToClientDVCper**�B
�<[���1�&
bzA!�@
�<[�� ��D����Tt�6BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]&AUDIO_PLAYBACK_DVCpSer�**CI
�<[���1�&
bzo!�@I
�<[�� ��D����Tt�6CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01r**D6�<[���1�&
bzS!�@6�<[�� ��D����Tt�	DMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]8TextInput_ServerToClientDVC-Rd**�E0��<[���1�&
bzM!�@0��<[�� ��D����Tt^EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]2AUDIO_PLAYBACK_LOSSY_DVCer�**F���<[���1�&
bzY!�@���<[�� ��D����Tt�FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]>Microsoft::Windows::RDS::InputpSer**G+!�<[���1�&
bzY!�@+!�<[�� ��D����Tt�	GMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]>Microsoft::Windows::RDS::InputpSer**H��<[���1�&
bzQ!�@��<[�� ��D����Tt<`HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]6RDCamera_Device_EnumeratorRemo**II��<[���1�&
bz[!�@I��<[�� ��D����Tt�eIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]@Microsoft::Windows::RDS::Notifyemo**J%��<[���1�&
bz[!�@%��<[�� ��D����Tt�	JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]@Microsoft::Windows::RDS::Notifyemo**�K��<[���1�&
bz'!�@��<[�� ��D����Tt�6KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]XPSRD-�**L��<[���1�&
bzk!�@��<[�� ��D����Tt�6LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]PMicrosoft::Windows::RDS::DisplayControlper**M
�<[���1�&
bz_!�@
�<[�� ��D����Tt�	MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]DMicrosoft::Windows::RDS::Location**N?�<[���1�&
bz_!�@?�<[�� ��D����Tt�eNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]DMicrosoft::Windows::RDS::Location**�Oק"<[���1�&
bz+!�@ק"<[�� ��D����Tt�eOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]cliprdr�1�&�**�P۵"<[���1�&
bzE!
H@۵"<[�� ��D����Tt^PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
2LogonNotify(SessionId=1)�**Q�V[<[���1�&
bzo!�@�V[<[�� ��D����Tt^QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01**R�3n<[���1�&
bzo!�@�3n<[�� ��D����Tt�eRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01�**PS���<[���1�&
bz�!�@���<[�� ��D����Tt�3SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**T�V�<[���1�&
bzo!�@�V�<[�� ��D����Tt^TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01**U��<[���1�&
bzo!�@��<[�� ��D����Tt^UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01**V�Z�<[���1�&
bzo!�@�Z�<[�� ��D����Tt^VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01c**Whc�<[���1�&
bzo!�@hc�<[�� ��D����Tt�eWMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01R**X�
�
<[���1�&
bzo!�@�
�
<[�� ��D����Tt^XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01o**Y�&�
<[���1�&
bzo!�@�&�
<[�� ��D����Tt�eYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.019**�Z�Ӻ
<[���1�&
bz'!�@�Ӻ
<[�� ��D����Tt�'ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]XPSRDi�**�[�=�<[���1�&
bz'!�@�=�<[�� ��D����Tt<`[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]XPSRD�**�\��,<[���1�&
bz'!�@��,<[�� ��D����Tt^\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]XPSRD�**�]q��*?[���1�&
bz!k@q��*?[�� ��D����TtdI]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**x^���*?[���1�&
bz�!�@���*?[�� ��D����TtdI^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�_o��*?[���1�&
bz1!
H@o��*?[�� ��D����Tt�	_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
OnDisconnected�**�`Z�*?[���1�&
bz5!
H@Z�*?[�� ��D����TtX_`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
"PreDisconnect(0)�**�a��*?[���1�&
bz7!
H@��*?[�� ��D����TtX_aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�
$SetErrorInfo(0x0)�**�b�Z�*?[���1�&
bz!f@�Z�*?[�� ��D����Tt�	bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L��**�c[�*?[���1�&
bz'!�@[�*?[�� ��D����Tt�	cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW���**�d~[�*?[���1�&
bz+!�@~[�*?[�� ��D����Tt�	dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpinpt�**�e�[�*?[���1�&
bz)!�@�[�*?[�� ��D����Tt�	eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpcmd�**f�[�*?[���1�&
bza!�@�[�*?[�� ��D����Tt�	fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]FMicrosoft::Windows::RDS::CoreInput**�g#]�*?[���1�&
bz)!�@#]�*?[�� ��D����Tt�	gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdplic�**�h^]�*?[���1�&
bz+!�@^]�*?[�� ��D����Tt�	hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpgrfx�**�i�]�*?[���1�&
bz+!�@�]�*?[�� ��D����Tt�	iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]railenc�**8j�]�*?[���1�&
bz�!�@�]�*?[�� ��D����Tt�	jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]nMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**k�]�*?[���1�&
bz_!�@�]�*?[�� ��D����Tt�	kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]DMicrosoft::Windows::RDS::Graphics**l@^�*?[���1�&
bze!�@@^�*?[�� ��D����Tt�	lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]JMicrosoft::Windows::RDS::MouseCursor**�mm^�*?[���1�&
bz%!�@m^�*?[�� ��D����Tt�	mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]
ECHO�**�n6h�*?[���1�&
bzM!�@6h�*?[�� ��D����Tt�	nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]2AUDIO_PLAYBACK_LOSSY_DVC�**�o\r�*?[���1�&
bzA!�@\r�*?[�� ��D����Tt�	oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]&AUDIO_PLAYBACK_DVC�**pQ~�*?[���1�&
bzo!�@Q~�*?[�� ��D����Tt�	pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]TMicrosoft::Windows::RDS::Geometry::v08.01**�qʋ�*?[���1�&
bz'!�@ʋ�*?[�� ��D����Tt�	qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpdr�**�r@��*?[���1�&
bz)!�@@��*?[�� ��D����Tt�	rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]rdpsnd�**�s���*?[���1�&
bz+!�@���*?[�� ��D����Tt�	sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]cliprdr�**�t���*?[���1�&
bz'!�@���*?[�� ��D����Tt�	tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]XPSRD�**uح�*?[���1�&
bzQ!�@ح�*?[�� ��D����Tt�	uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]6RDCamera_Device_Enumerator**v㹺*?[���1�&
bzk!�@㹺*?[�� ��D����Tt�	vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�]PMicrosoft::Windows::RDS::DisplayControlElfChnkw�w��h�`�a�v�-"v���=�����f?�m�MF��^�zEHŋm>
#�uJ�ZO�j)V**0w�ź*?[���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@�ź*?[�� ��D����Tt�	wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
XPSRD�1�&0**�x�˺*?[���1�&
bz'!�@�˺*?[�� ��D����Tt�	xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDh�**�y�Һ*?[���1�&
bz'!�@�Һ*?[�� ��D����Tt�	yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDr�**@z3�*?[���1�&
bz�!
H@3�*?[�� ��D����TtX_zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}�qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotify@**�{:3�*?[���1�&
bzI!
H@:3�*?[�� ��D����TtX_{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}6GetServerAutoReconnectInfoY`X+L��**�|�3�*?[���1�&
bzI!
H@�3�*?[�� ��D����TtX_|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}6GetServerAutoReconnectInfoatio�**p}��?[���1�&
bz�!�@��?[�L@ �>'@��=��9t�	}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
TCP10.8.0.6:52658A��p**8~���?[���1�&
bz�!
A@���?[�L@ �>'@��=��9t�	~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**��%�?[���1�&
bz5!
H@�%�?[�L@ �>'@��=��9t�FMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"PrepareForAccept�**���%�?[���1�&
bz1!
H@�%�?[�L@ �>'@��=��9t�F�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}SendPolicyData�** ��A�?[���1�&
bzs!�@�A�?[�L@ �>'@��=��9t�F�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���S�����T�S8�F�UzD��8vA��+�=
InstanceID

 **�y�L�?[���1�&
bzi!�@y�L�?[�L@ �>'@��=��9txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�25�b�2Y`X+L�
Wl��:��.vA��!�=error
@=**����L�?[���1�&
bz!�@��L�?[�L@ �>'@��=��9tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�25@-�**(�A�L�?[���1�&
bzy!�@A�L�?[�L@ �>'@��=��9txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*
#5���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�eTS/(**����L�?[���1�&
bz1!
H@��L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}OnDisconnectedOper�**��
�L�?[���1�&
bz9!f@
�L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)�LNc�T�� �����v-Rdp�**��s�L�?[���1�&
bz�!�@s�L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��*W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**��"�L�?[���1�&
bz+!�@"�L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpta�**����L�?[���1�&
bz)!�@��L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**���L�?[���1�&
bza!�@��L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInputReas**����L�?[���1�&
bz)!�@��L�?[�L@ �>'@��=��9t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OrdpliceTS/�**��H��?[���1�&
bz=!�@H��?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�TCP10.8.0.6:52660io�**��/1��?[���1�&
bz'!
A@/1��?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj�RDP-Tcp#0r�**���\��?[���1�&
bz5!
H@�\��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"PrepareForAccepter�**��3]��?[���1�&
bz1!
H@3]��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}SendPolicyDataOper�**��&x��?[���1�&
bz!�@&x��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S��'�**h��_��?[���1�&
bz�!e@�_��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^m>�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).sh**��a��?[���1�&
bz)!�@a��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OrdpliceDes�**��wa��?[���1�&
bz)!�@wa��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmdemot�**��zb��?[���1�&
bz5!
H@zb��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"OnStartLicensingot�**���g��?[���1�&
bz5!
H@�g��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"AcceptConnectiondp�**0��p��?[���1�&
bz�!h@�p��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�EH�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]Cor0**���q��?[���1�&
bz�!
G@�q��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���uJ@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDDs-�**���u��?[���1�&
bzA!
H@�u��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}.GetSecurityFilterCredsWind�**��:���?[���1�&
bz7!
H@:���?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}$SendClientLicensep�**��4���?[���1�&
bz5!
H@4���?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"ProtocolComplete�9�**������?[���1�&
bz!b@����?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)�**���?[���1�&
bz!d@�?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)�**��	���?[���1�&
bz!�@	���?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����V}����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)��'�**������?[���1�&
bzK!
H@����?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}8AuthenticateClientToSessionind�**����?[���1�&
bzo!�@���?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�Z��kŵmV�K&<�G�E@��4vA��'�=TunnelID
r**��!]��?[���1�&
bz'!
H@!]��?[�)h �3x�K�cW���tl"�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}PreCreateo�**p�����?[���1�&
bz�!
B@����?[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���Ͻ^�*�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0QB��'p**��+G��?[���1�&
bz+!�@+G��?[�)h �3x�K�cW���t�6�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OrdpgrfxQB��'�**���G��?[���1�&
bz!!@�G��?[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)p�**�H��?[���1�&
bzQ!
H@H��?[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}>Waiting for graphics subsystemServ**��S��?[���1�&
bz+!�@S��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinptoso�**��"��?[���1�&
bzW!�@�"��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����V<TCP: Reason Code: 5 (Unknown)c**���)��?[���1�&
bz�!�@�)��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��j)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PCSer�**���0��?[���1�&
bz+!
H@�0��?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}OnConnected�**��1��?[���1�&
bz#!
H@1��?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}OnReady**�**���u�?[���1�&
bzA!�@�u�?[�)h �3x�K�cW���t$
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]�"UDP[10.8.0.6]:54646��1�&�**�v�?[���1�&
bza!�@v�?[�)h �3x�K�cW���tL�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput0**��z�?[���1�&
bze!�@�z�?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursorio**�n��?[���1�&
bz_!�@n��?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics8**����I�?[���1�&
bz#!�@��I�?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����VUDPrd�**��JW�?[���1�&
bzi!�@�JW�?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4�z3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PCCore**���@Y�?[���1�&
bzI!
H@�@Y�?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}6ConnectNotify(SessionId=3)Core�**��oq�?[���1�&
bz'!�@oq�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdrs�**(�y�?[���1�&
bz{!�@y�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01ws-(** �my�?[���1�&
bzu!�@my�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01er **��y�?[���1�&
bzo!�@�y�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��tx��?[���1�&
bz5!
H@tx��?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"PreDisconnect(0)S/�**���x��?[���1�&
bz7!
H@�x��?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}$SetErrorInfo(0x0)o�**P�mf��?[���1�&
bz�!�@mf��?[�)h �3x�K�cW���t)�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���ŋ,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCsP**�����?[���1�&
bz5!
H@���?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"DisconnectNotifyot�**��E���?[���1�&
bzI!
H@E���?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}6GetServerAutoReconnectInfoices�**��`��?[���1�&
bzA!�@`��?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVCServ�**�����?[���1�&
bz'!�@���?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdrv�**���M��?[���1�&
bz/!
B@�M��?[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���Ͻ^RDP-Tcp#0o�**��ɾ��?[���1�&
bzI!
H@ɾ��?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}6ConnectNotify(SessionId=1)ws-R�**������?[���1�&
bz'!�@����?[�)h �3x�K�cW���tdI�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr��**��P�?[���1�&
bzA!�@P�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC@0��**���<�?[���1�&
bzA!�@�<�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC��**�-?�?[���1�&
bzS!�@-?�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC!**��?�?[���1�&
bzo!�@�?�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��?�?[���1�&
bz[!�@�?�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify[��**��@�?[���1�&
bz+!�@@�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**�>A�?[���1�&
bzS!�@>A�?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**��A�?[���1�&
bz[!�@�A�?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify[��**���4�?[���1�&
bzE!
H@�4�?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}2LogonNotify(SessionId=1)b�**���A�?[���1�&
bzM!�@�A�?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**���A�?[���1�&
bzY!�@��A�?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**�U�A�?[���1�&
bzY!�@U�A�?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input@۵**�s�U�?[���1�&
bzQ!�@s�U�?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator��D��**�k�U�?[���1�&
bzo!�@k�U�?[�)h �3x�K�cW���txR�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01�**���ZV�?[���1�&
bzO!�@�ZV�?[�)h �3x�K�cW���t�L�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���ŋ�8SERVER-PC�**���c�?[���1�&
bzo!�@��c�?[�)h �3x�K�cW���tL�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�Ztd�?[���1�&
bzk!�@Ztd�?[�)h �3x�K�cW���tL�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControlemo**����?[���1�&
bz_!�@���?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Locationd**����?[���1�&
bz_!�@���?[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Locations**�%���?[���1�&
bzo!�@%���?[�)h �3x�K�cW���tP\�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01s**���?[���1�&
bzo!�@��?[�)h �3x�K�cW���tL�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01s**���>��?[���1�&
bz'!�@�>��?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDs�**���q�?[���1�&
bz'!�@�q�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��6�?[���1�&
bz'!�@6�?[�)h �3x�K�cW���t�k�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��$Xw�?[���1�&
bz'!�@$Xw�?[�)h �3x�K�cW���t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��"ԇnB[���1�&
bz'!�@"ԇnB[�)h �3x�K�cW���tHZ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���P7oB[���1�&
bz'!�@�P7oB[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��k�oB[���1�&
bz'!�@k�oB[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���B�pB[���1�&
bz'!�@�B�pB[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���욡B[���1�&
bz'!�@�욡B[�)h �3x�K�cW���tHZ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���B[���1�&
bz'!�@�B[�)h �3x�K�cW���tHZ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���B[���1�&
bz'!�@�B[�)h �3x�K�cW���tHZ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**����B[���1�&
bz'!�@��B[�)h �3x�K�cW���tHZ�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**����0C[���1�&
bz!k@��0C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)�**x���0C[���1�&
bz�!�@��0C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*
#$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**����0C[���1�&
bz1!
H@��0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}OnDisconnected�**��Q��0C[���1�&
bz5!
H@Q��0C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}"PreDisconnect(0)�**��r��0C[���1�&
bz7!
H@r��0C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs}$SetErrorInfo(0x0)�**���0C[���1�&
bz!f@�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L)�**��,�0C[���1�&
bz'!�@,�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��*�**����0C[���1�&
bz+!�@��0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**����0C[���1�&
bz)!�@��0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**���0C[���1�&
bza!�@��0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��.	�0C[���1�&
bz)!�@.	�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��J	�0C[���1�&
bz+!�@J	�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**��+
�0C[���1�&
bz+!�@+
�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8�I
�0C[���1�&
bz�!�@I
�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**�f
�0C[���1�&
bz_!�@f
�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**��
�0C[���1�&
bze!�@�
�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**���
�0C[���1�&
bz%!�@�
�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHO�**����0C[���1�&
bzA!�@��0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**��|�0C[���1�&
bzM!�@|�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC���1�&
bzElfChnk�m�m�h�`����hkB�v���=�����f?�m�MF�=lu��U��K�.-"�WUh�$Ox�6�c**x��&�0C[���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz)!�@�&�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
TMicrosoft::Windows::RDS::Geometry::v08.01x**��1�0C[���1�&
bz'!�@1�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��c1�0C[���1�&
bz)!�@c1�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsnd�**��j<�0C[���1�&
bz+!�@j<�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdrect�**��J�0C[���1�&
bzQ!�@�J�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_EnumeratorctIn**��BV�0C[���1�&
bz'!�@BV�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDS�**�iZ�0C[���1�&
bzk!�@iZ�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl�'**��Ve�0C[���1�&
bz'!�@Ve�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD-�**���m�0C[���1�&
bz'!�@�m�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**���u�0C[���1�&
bz'!�@�u�0C[�)h �3x�K�cW���t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**@��1C[���1�&
bz�!
H@�1C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs��qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyI�QB��'@**���1C[���1�&
bzI!
H@�1C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoServ�**��'1C[���1�&
bzI!
H@'1C[�)h �3x�K�cW���t�2�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfows-R�**p��v�[���1�&
bz�!�@��v�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-"&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
TCP10.8.0.6:64483p**8�Av�[���1�&
bz�!
A@�Av�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��$�Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**�[�v�[���1�&
bz5!
H@[�v�[��K �%�O@���'6t�ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**���v�[���1�&
bz1!
H@��v�[��K �%�O@���'6t�ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�** t�v�[���1�&
bzs!�@t�v�[��K �%�O@���'6t�ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���*�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **��v�[���1�&
bzi!�@��v�[��K �%�O@���'6t@)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�,�b�2Y`X+L�
Wl��:��.vA��!�=error
@**(��v�[���1�&
bzy!�@��v�[��K �%�O@���'6t@)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�.�,���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**�E�v�[���1�&
bz!�@E�v�[��K �%�O@���'6tP
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�,@�**�]/�v�[���1�&
bz1!
H@]/�v�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**�	10�v�[���1�&
bz9!f@10�v�[��K �%�O@���'6t�		Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�LNc�T�� �����v�**�
�1�v�[���1�&
bz�!�@�1�v�[��K �%�O@���'6t�	
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��}8W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**��1�v�[���1�&
bz+!�@�1�v�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**�2�v�[���1�&
bz)!�@2�v�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**
.2�v�[���1�&
bza!�@.2�v�[��K �%�O@���'6t�	
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��2�v�[���1�&
bz)!�@�2�v�[��K �%�O@���'6t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**����w�[���1�&
bz=!�@���w�[�Mv ��0L����?�t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-"TCP10.8.0.6:64484�**�ϱ�w�[���1�&
bz'!
A@ϱ�w�[�Mv ��0L����?�t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��$RDP-Tcp#0�**�֖�w�[���1�&
bz5!
H@֖�w�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**���w�[���1�&
bz1!
H@��w�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�**�$�w�[���1�&
bz!�@$�w�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���*�**h�yHy�[���1�&
bz�!e@�yHy�[�Mv ��0L����?�t0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^�K�*�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**�zHy�[���1�&
bz)!�@zHy�[�Mv ��0L����?�t0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**�zHy�[���1�&
bz)!�@zHy�[�Mv ��0L����?�t0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**�]zHy�[���1�&
bz5!
H@]zHy�[�Mv ��0L����?�t0'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"OnStartLicensing�**�A|Hy�[���1�&
bz5!
H@A|Hy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"AcceptConnection�**0Hy�[���1�&
bz�!h@Hy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+��U�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**�BHy�[���1�&
bz�!
G@BHy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���W@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**�N�Hy�[���1�&
bzA!
H@N�Hy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�.GetSecurityFilterCreds�**��Hy�[���1�&
bz7!
H@�Hy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SendClientLicense�**�S�Hy�[���1�&
bz5!
H@S�Hy�[�Mv ��0L����?�t�hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"ProtocolComplete�**���Hy�[���1�&
bz!b@��Hy�[�Mv ��0L����?�t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**���Hy�[���1�&
bz!d@��Hy�[�Mv ��0L����?�t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**� 
�Hy�[���1�&
bz!�@
�Hy�[�Mv ��0L����?�t�	 Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����c�����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**�!�Hy�[���1�&
bzK!
H@�Hy�[�Mv ��0L����?�t�h!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�8AuthenticateClientToSession�**"�Hy�[���1�&
bzo!�@�Hy�[�Mv ��0L����?�t�	"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��kUh��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**�#�Hy�[���1�&
bz'!
H@�Hy�[�Mv ��0L����?�t�h#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�PreCreate�**p$8QOy�[���1�&
bz�!
B@8QOy�[�Mv ��0L����?�t@)$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����=l}8�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**�%��Oy�[���1�&
bz!!@��Oy�[�Mv ��0L����?�t@)%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**&�Oy�[���1�&
bzQ!
H@�Oy�[�Mv ��0L����?�t@)&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�>Waiting for graphics subsystem**�'k�Oy�[���1�&
bz+!�@k�Oy�[�Mv ��0L����?�t\'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�(���y�[���1�&
bz+!�@���y�[�Mv ��0L����?�t0'(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**)���y�[���1�&
bzW!�@���y�[�Mv ��0L����?�t0')Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����c<TCP: Reason Code: 5 (Unknown)**�*޹�y�[���1�&
bz�!�@޹�y�[�Mv ��0L����?�t0'*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`�x)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**�+u��y�[���1�&
bz+!
H@u��y�[�Mv ��0L����?�t�	+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnConnected�**�,���y�[���1�&
bz#!
H@���y�[�Mv ��0L����?�t�	,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnReady�**-���y�[���1�&
bza!�@���y�[�Mv ��0L����?�t\h-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**.���y�[���1�&
bze!�@���y�[�Mv ��0L����?�t�$.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**�/�^�y�[���1�&
bzA!�@�^�y�[�Mv ��0L����?�t$
/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-""UDP[10.8.0.6]:57674�**0`�y�[���1�&
bz_!�@`�y�[�Mv ��0L����?�t�$0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**1"�z�[���1�&
bzi!�@"�z�[�Mv ��0L����?�t� 1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4u�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**�2��z�[���1�&
bzI!
H@��z�[�Mv ��0L����?�t� 2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6ConnectNotify(SessionId=3)�**�3�Tz�[���1�&
bz#!�@�Tz�[�Mv ��0L����?�tP
3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����cUDP�**�4��}z�[���1�&
bz'!�@��}z�[�Mv ��0L����?�t�f4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�5��~z�[���1�&
bz5!
H@��~z�[�Mv ��0L����?�tP
5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PreDisconnect(0)�**�6��~z�[���1�&
bz7!
H@��~z�[�Mv ��0L����?�tP
6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SetErrorInfo(0x0)�**P7�a�z�[���1�&
bz�!�@�a�z�[�Mv ��0L����?�t\7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,����,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**�8�t�z�[���1�&
bz5!
H@�t�z�[�Mv ��0L����?�tP
8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"DisconnectNotify�**�9�t�z�[���1�&
bzI!
H@�t�z�[�Mv ��0L����?�tP
9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfo�**(:	r�z�[���1�&
bz{!�@	r�z�[�Mv ��0L����?�t� :Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01(** ;Hr�z�[���1�&
bzu!�@Hr�z�[�Mv ��0L����?�t� ;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01 **<dr�z�[���1�&
bzo!�@dr�z�[�Mv ��0L����?�t� <Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�=Gs�z�[���1�&
bzA!�@Gs�z�[�Mv ��0L����?�t� =Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�>ʰz�[���1�&
bz'!�@ʰz�[�Mv ��0L����?�t�	>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�?���z�[���1�&
bz/!
B@���z�[�Mv ��0L����?�t\h?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����=lRDP-Tcp#0�**�@F(�z�[���1�&
bzI!
H@F(�z�[�Mv ��0L����?�t\h@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6ConnectNotify(SessionId=1)�**�A���z�[���1�&
bz'!�@���z�[�Mv ��0L����?�t�fAMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�B�<{�[���1�&
bzA!�@�<{�[�Mv ��0L����?�t\hBMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�C>D{�[���1�&
bzA!�@>D{�[�Mv ��0L����?�t\hCMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**D�D{�[���1�&
bzS!�@�D{�[�Mv ��0L����?�t\hDMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**E�D{�[���1�&
bz[!�@�D{�[�Mv ��0L����?�t\hEMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**FE{�[���1�&
bzo!�@E{�[�Mv ��0L����?�t\hFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�GNE{�[���1�&
bz+!�@NE{�[�Mv ��0L����?�t\hGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**H�J{�[���1�&
bzS!�@�J{�[�Mv ��0L����?�t�	HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**I�K{�[���1�&
bz[!�@�K{�[�Mv ��0L����?�t�	IMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**�J��#{�[���1�&
bzO!�@��#{�[�Mv ��0L����?�t�JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,�����8SERVER-PC�**�K��#{�[���1�&
bzM!�@��#{�[�Mv ��0L����?�t�%KMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**L6r'{�[���1�&
bzY!�@6r'{�[�Mv ��0L����?�t�%LMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**Mu'{�[���1�&
bzY!�@u'{�[�Mv ��0L����?�t�	MMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**�Nȸ7{�[���1�&
bzE!
H@ȸ7{�[�Mv ��0L����?�t�%NMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�2LogonNotify(SessionId=1)�**O�4;{�[���1�&
bzQ!�@�4;{�[�Mv ��0L����?�t@*OMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**Pq�G{�[���1�&
bzo!�@q�G{�[�Mv ��0L����?�t@*PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**Q�ee{�[���1�&
bzo!�@�ee{�[�Mv ��0L����?�t�fQMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**R+ie{�[���1�&
bzk!�@+ie{�[�Mv ��0L����?�t�fRMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**SjP{}�[���1�&
bz_!�@jP{}�[�Mv ��0L����?�t�%SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**TT{}�[���1�&
bz_!�@T{}�[�Mv ��0L����?�t�	TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**Um{}�[���1�&
bzo!�@m{}�[�Mv ��0L����?�t@*UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�V�{}�[���1�&
bz'!�@�{}�[�Mv ��0L����?�t@*VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**W���~�[���1�&
bzo!�@���~�[�Mv ��0L����?�t� WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�X:|��[���1�&
bz'!�@:|��[�Mv ��0L����?�t@*XMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�Y����[���1�&
bz'!�@����[�Mv ��0L����?�t�fYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�Z��Ⴘ[���1�&
bz'!�@��Ⴘ[�Mv ��0L����?�t� ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�[W����[���1�&
bz!k@W����[�Mv ��0L����?�t\h[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**x\ج���[���1�&
bz�!�@ج���[�Mv ��0L����?�t\h\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�.$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�]ܯ��[���1�&
bz1!
H@ܯ��[�Mv ��0L����?�t�	]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**�^𯴸[���1�&
bz!f@𯴸[�Mv ��0L����?�t�	^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**�_�𯴸[���1�&
bz'!�@�𯴸[�Mv ��0L����?�t�	_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��}8�**�`�𯴸[���1�&
bz+!�@�𯴸[�Mv ��0L����?�t�	`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**�a�𯴸[���1�&
bz)!�@�𯴸[�Mv ��0L����?�t�	aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**b�𯴸[���1�&
bza!�@�𯴸[�Mv ��0L����?�t�	bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**�c;񯴸[���1�&
bz)!�@;񯴸[�Mv ��0L����?�t�	cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**�d񯴸[���1�&
bz+!�@񯴸[�Mv ��0L����?�t�	dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�e�񯴸[���1�&
bz+!�@�񯴸[�Mv ��0L����?�t�	eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8f�񯴸[���1�&
bz�!�@�񯴸[�Mv ��0L����?�t�	fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**g�񯴸[���1�&
bz_!�@�񯴸[�Mv ��0L����?�t�	gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**h�񯴸[���1�&
bze!�@�񯴸[�Mv ��0L����?�t�	hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**�i�񯴸[���1�&
bz%!�@�񯴸[�Mv ��0L����?�t�	iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHO�**�j�����[���1�&
bz5!
H@�����[�Mv ��0L����?�t\hjMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PreDisconnect(0)�**�k����[���1�&
bz7!
H@����[�Mv ��0L����?�t\hkMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SetErrorInfo(0x0)�**�l�����[���1�&
bzA!�@�����[�Mv ��0L����?�t�	lMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�mT���[���1�&
bzM!�@T���[�Mv ��0L����?�t�	mMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC���1�&
bzElfChnkn�n������v5���<v���=�����f?�m�MF�mju��U��K�.-"�WUh�$OEv�6�c**0nd���[���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@d���[�Mv ��0L����?�t�	nMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
XPSRD::W0**�o����[���1�&
bz'!�@����[�Mv ��0L����?�t�	oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdrr�**�p����[���1�&
bz)!�@����[�Mv ��0L����?�t�	pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OrdpsndeTS/�**�qf���[���1�&
bz+!�@f���[�Mv ��0L����?�t�	qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OcliprdrTS/�**r����[���1�&
bzQ!�@����[�Mv ��0L����?�t�	rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator6**s&���[���1�&
bzo!�@&���[�Mv ��0L����?�t�	sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01S**tu.���[���1�&
bzk!�@u.���[�Mv ��0L����?�t�	tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl�'**�u�4���[���1�&
bz'!�@�4���[�Mv ��0L����?�t�	uMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD-�**�v�<���[���1�&
bz'!�@�<���[�Mv ��0L����?�t�	vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**�wcA���[���1�&
bz'!�@cA���[�Mv ��0L����?�t�	wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**@xnyٴ�[���1�&
bz�!
H@nyٴ�[�Mv ��0L����?�t�%xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs��qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyI�QB��'@**�y�yٴ�[���1�&
bzI!
H@�yٴ�[�Mv ��0L����?�t�%yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoServ�**�z6zٴ�[���1�&
bzI!
H@6zٴ�[�Mv ��0L����?�t�%zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfows-R�**p{b�t2]���1�&
bz�!�@b�t2]��	 ��tB�"�'�1t�	{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-"&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
TCP10.8.0.6:57622p**8|M�u2]���1�&
bz�!
A@M�u2]��	 ��tB�"�'�1t�	|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��$�Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**�}�nv2]���1�&
bz5!
H@�nv2]��	 ��tB�"�'�1t�P}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**�~�nv2]���1�&
bz1!
H@�nv2]��	 ��tB�"�'�1t�P~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�** ڋv2]���1�&
bzs!�@ڋv2]��	 ��tB�"�'�1t�PMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���*�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **��Lw%2]���1�&
bzi!�@�Lw%2]��	 ��tB�"�'�1tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�,�b�2Y`X+L�
Wl��:��.vA��!�=error
@**(��Nw%2]���1�&
bzy!�@�Nw%2]��	 ��tB�"�'�1tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�.�,���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**���Sw%2]���1�&
bz!�@�Sw%2]��	 ��tB�"�'�1t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�,@�**���cw%2]���1�&
bz1!
H@�cw%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**���dw%2]���1�&
bz9!f@�dw%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�LNc�T�� �����v�**���dw%2]���1�&
bz�!�@�dw%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��}8W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**�� ew%2]���1�&
bz+!�@ ew%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**��Oew%2]���1�&
bz)!�@Oew%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**�rew%2]���1�&
bza!�@rew%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**���ew%2]���1�&
bz)!�@�ew%2]��	 ��tB�"�'�1t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**���o�&2]���1�&
bz=!�@�o�&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-"TCP10.8.0.6:57624�**��8��&2]���1�&
bz'!
A@8��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��$RDP-Tcp#0�**���j�&2]���1�&
bz5!
H@�j�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**���k�&2]���1�&
bz1!
H@�k�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�**��%��&2]���1�&
bz!�@%��&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���*�**h�h�&2]���1�&
bz�!e@h�&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^�K�*�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**���h�&2]���1�&
bz)!�@�h�&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**���h�&2]���1�&
bz)!�@�h�&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**��}i�&2]���1�&
bz5!
H@}i�&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"OnStartLicensing�**���l�&2]���1�&
bz5!
H@�l�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"AcceptConnection�**0��q�&2]���1�&
bz�!h@�q�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+��U�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**��r�&2]���1�&
bz�!
G@r�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���W@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**��ot�&2]���1�&
bzA!
H@ot�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�.GetSecurityFilterCreds�**��۪�&2]���1�&
bz7!
H@۪�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SendClientLicense�**��߫�&2]���1�&
bz5!
H@߫�&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"ProtocolComplete�**��D��&2]���1�&
bz!b@D��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**��i��&2]���1�&
bz!d@i��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**����&2]���1�&
bz!�@��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����c�����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**�����&2]���1�&
bzK!
H@���&2]��\ �)<�F�qG�T�t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�8AuthenticateClientToSession�**�d��&2]���1�&
bzo!�@d��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��kUh��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**p�܀�&2]���1�&
bz�!
B@܀�&2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����mj}8�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**����&2]���1�&
bz!!@��&2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**�
�&2]���1�&
bzQ!
H@
�&2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�>Waiting for graphics subsystem**���
�&2]���1�&
bz+!�@�
�&2]��\ �)<�F�qG�T�tO�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�����&2]���1�&
bz+!�@���&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**�R��&2]���1�&
bzW!�@R��&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����c<TCP: Reason Code: 5 (Unknown)**�����&2]���1�&
bz�!�@���&2]��\ �)<�F�qG�T�th<�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`�Ev)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**��$��&2]���1�&
bz+!
H@$��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnConnected�**��7��&2]���1�&
bz#!
H@7��&2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnReady�**��$'2]���1�&
bzA!�@$'2]��\ �)<�F�qG�T�t$
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]-""UDP[10.8.0.6]:52394�**�	�'2]���1�&
bza!�@	�'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**�
�'2]���1�&
bze!�@
�'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**�L!'2]���1�&
bz_!�@L!'2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**��V'2]���1�&
bz#!�@V'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����cUDP�**�{''2]���1�&
bzi!�@{''2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4u�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**��z[)'2]���1�&
bzI!
H@z[)'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6ConnectNotify(SessionId=1)�**��s0N'2]���1�&
bz'!�@s0N'2]��\ �)<�F�qG�T�td�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��0N'2]���1�&
bzS!�@�0N'2]��\ �)<�F�qG�T�td�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�&1N'2]���1�&
bzo!�@&1N'2]��\ �)<�F�qG�T�td�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�g1N'2]���1�&
bz[!�@g1N'2]��\ �)<�F�qG�T�td�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**���1N'2]���1�&
bz+!�@�1N'2]��\ �)<�F�qG�T�td�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**�`3N'2]���1�&
bz[!�@`3N'2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**(��EQ'2]���1�&
bz{!�@�EQ'2]��\ �)<�F�qG�T�ttB�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01(** �(FQ'2]���1�&
bzu!�@(FQ'2]��\ �)<�F�qG�T�ttB�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01 **�.qQ'2]���1�&
bzo!�@.qQ'2]��\ �)<�F�qG�T�ttB�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��R'2]���1�&
bzS!�@�R'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ClientToServerDVC**�kR'2]���1�&
bzY!�@kR'2]��\ �)<�F�qG�T�tt[�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**��R'2]���1�&
bzY!�@�R'2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**��}�R'2]���1�&
bzA!�@}�R'2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**����V'2]���1�&
bzM!�@��V'2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**�T�`'2]���1�&
bzQ!�@T�`'2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**��`'2]���1�&
bzo!�@�`'2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��a'2]���1�&
bzo!�@�a'2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�ÿb'2]���1�&
bzk!�@ÿb'2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**��m'2]���1�&
bz_!�@�m'2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**�Vm'2]���1�&
bz_!�@Vm'2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**P��n�'2]���1�&
bz�!�@�n�'2]��\ �)<�F�qG�T�tO�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,����,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**��#��(2]���1�&
bz'!�@#��(2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��o�(2]���1�&
bzE!
H@o�(2]��\ �)<�F�qG�T�tL'�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�2LogonNotify(SessionId=1)�**�ϴ�(2]���1�&
bzo!�@ϴ�(2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�Jɸ(2]���1�&
bzo!�@Jɸ(2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**��uU�)2]���1�&
bz'!�@uU�)2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���p/+2]���1�&
bz'!�@�p/+2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��B�+2]���1�&
bz'!�@B�+2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��ph�,2]���1�&
bz'!�@ph�,2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**���.2]���1�&
bz'!�@�.2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��=�U/2]���1�&
bz'!�@=�U/2]��\ �)<�F�qG�T�t@c�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��0��R2]���1�&
bz!k@0��R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**x����R2]���1�&
bz�!�@���R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�.$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�����R2]���1�&
bz1!
H@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**�����R2]���1�&
bz!f@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�6�**����R2]���1�&
bz'!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��}8�**��H��R2]���1�&
bz+!�@H��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**��p��R2]���1�&
bz)!�@p��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**����R2]���1�&
bza!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**��ל�R2]���1�&
bz)!�@ל�R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**����R2]���1�&
bz+!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**����R2]���1�&
bz+!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8�>��R2]���1�&
bz�!�@>��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**�t��R2]���1�&
bz_!�@t��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**����R2]���1�&
bze!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**���R2]���1�&
bz%!�@�R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHO�**�����R2]���1�&
bz5!
H@���R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PreDisconnect(0)�**��֞�R2]���1�&
bz7!
H@֞�R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SetErrorInfo(0x0)�**����R2]���1�&
bzM!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**�H��R2]���1�&
bzQ!�@H��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**��֭�R2]���1�&
bz'!�@֭�R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��ֳ�R2]���1�&
bz'!�@ֳ�R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��C��R2]���1�&
bz)!�@C��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsnd�**����R2]���1�&
bz+!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**���R2]���1�&
bzS!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**����R2]���1�&
bzo!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**���R2]���1�&
bzS!�@��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ClientToServerDVC**����R2]���1�&
bzk!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**�����R2]���1�&
bzA!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC���1�&
bzElfChnk�d�d�����?#f�u���v���=�����f?�m�MF�f��M-��C�&�OE`�O�q�.�[**0�r��R2]���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@r��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
XPSRD::W0**�����R2]���1�&
bz'!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDr�**�����R2]���1�&
bz'!�@���R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**��Y��R2]���1�&
bz'!�@Y��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDd�**��'��R2]���1�&
bz'!�@'��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDD�**��j��R2]���1�&
bz'!�@j��R2]��\ �)<�F�qG�T�t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD/�**@�G�R2]���1�&
bz�!
H@G�R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs��qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyP@**��n�R2]���1�&
bzI!
H@n�R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoOper�**����R2]���1�&
bzI!
H@��R2]��\ �)<�F�qG�T�t�B�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoXP�**p��M�/b���1�&
bz�!�@�M�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
 TCP10.0.1.72:54071p**8���N�/b���1�&
bz�!
A@��N�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj���Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**���N�/b���1�&
bz5!
H@�N�/b�t7 �ΩC�`�<t�^�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**��R�N�/b���1�&
bz1!
H@R�N�/b�t7 �ΩC�`�<t�^�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�** ���N�/b���1�&
bzs!�@��N�/b�t7 �ΩC�`�<t�^�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���"�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **��nV�/b���1�&
bzi!�@�nV�/b�t7 �ΩC�`�<t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�$�b�2Y`X+L�
Wl��:��.vA��!�=error
@**(�oV�/b���1�&
bzy!�@oV�/b�t7 �ΩC�`�<t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�&�$���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�(**���oV�/b���1�&
bz!�@�oV�/b�t7 �ΩC�`�<t@(�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2�$@�**���{V�/b���1�&
bz1!
H@�{V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**��>|V�/b���1�&
bz9!f@>|V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�LNc�T�� �����v�**��P|V�/b���1�&
bz�!�@P|V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��m0W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
�**��y}V�/b���1�&
bz+!�@y}V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**���}V�/b���1�&
bz)!�@�}V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**��}V�/b���1�&
bza!�@�}V�/b�t7 �ΩC�`�<t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**�4~V�/b���1�&
bz)!�@4~V�/b�t7 �ΩC�`�<t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��X�/b���1�&
bz?!�@�X�/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb] TCP10.0.1.72:54072�**���X�/b���1�&
bz'!
A@��X�/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��RDP-Tcp#0�**��Y�/b���1�&
bz5!
H@�Y�/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PrepareForAccept�**�Y�/b���1�&
bz1!
H@Y�/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�SendPolicyData�**��Y�/b���1�&
bz!�@�Y�/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���"�**h�ة�/b���1�&
bz�!e@�ة�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^�C�"�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).h**��ة�/b���1�&
bz)!�@�ة�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**��ة�/b���1�&
bz)!�@�ة�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**�	$٩�/b���1�&
bz5!
H@$٩�/b��� ����M�X;�Pt�z	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"OnStartLicensing�**�
�ک�/b���1�&
bz5!
H@�ک�/b��� ����M�X;�PtLp
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"AcceptConnection�**0�ީ�/b���1�&
bz�!h@�ީ�/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�M�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**��ީ�/b���1�&
bz�!
G@�ީ�/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@����O@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDD�**�
�ߩ�/b���1�&
bzA!
H@�ߩ�/b��� ����M�X;�PtLp
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�.GetSecurityFilterCreds�**�����/b���1�&
bz7!
H@����/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SendClientLicense�**�)���/b���1�&
bz5!
H@)���/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"ProtocolComplete�**����/b���1�&
bz!b@���/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�**���/b���1�&
bz!d@��/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�**�H��/b���1�&
bz!�@H��/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����[�����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)�**��
��/b���1�&
bzK!
H@�
��/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�8AuthenticateClientToSession�**��/b���1�&
bzo!�@��/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��kE`��kŵmV�K&<�G�E@��4vA��'�=TunnelID
**��;��/b���1�&
bz'!
H@�;��/b��� ����M�X;�PtLpMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�PreCreate�**�`��/b���1�&
bzC!�@`��/b��� ����M�X;�Pt$
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]$UDP[10.0.1.72]:55546�**p%L��/b���1�&
bz�!
B@%L��/b��� ����M�X;�Pt@(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����fm0�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0p**��,��/b���1�&
bz!!@�,��/b��� ����M�X;�Pt@(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�**-��/b���1�&
bzQ!
H@-��/b��� ����M�X;�Pt@(Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�>Waiting for graphics subsystem**��8��/b���1�&
bz+!�@�8��/b��� ����M�X;�Pt0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�	ɷ�/b���1�&
bz+!�@	ɷ�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**��ͷ�/b���1�&
bz#!�@�ͷ�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����[UDP�**�	ѷ�/b���1�&
bz�!�@	ѷ�/b��� ����M�X;�Pt�zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`��q)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC�**��ѷ�/b���1�&
bz+!
H@�ѷ�/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnConnected�**��ѷ�/b���1�&
bz#!
H@�ѷ�/b��� ����M�X;�Pt�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnReady�**� �o��/b���1�&
bz#!�@�o��/b��� ����M�X;�Pt�x Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����[UDP�**!�p��/b���1�&
bza!�@�p��/b��� ����M�X;�Pt�x!Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**"�p��/b���1�&
bze!�@�p��/b��� ����M�X;�Pt�x"Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**#�r��/b���1�&
bz_!�@�r��/b��� ����M�X;�Pt�x#Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**$���/b���1�&
bzi!�@���/b��� ����M�X;�Pt�y$Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**(%�"��/b���1�&
bz{!�@�"��/b��� ����M�X;�Pt@(%Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01(** &�%��/b���1�&
bzu!�@�%��/b��� ����M�X;�Pt@(&Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01 **'3&��/b���1�&
bzo!�@3&��/b��� ����M�X;�Pt@('Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�(�|��/b���1�&
bzI!
H@�|��/b��� ����M�X;�Pt@((Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6ConnectNotify(SessionId=3)�**�)}y
�/b���1�&
bz'!�@}y
�/b��� ����M�X;�Pt�y)Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�*��/b���1�&
bzA!�@��/b��� ����M�X;�Pt@(*Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�+���/b���1�&
bzM!�@���/b��� ����M�X;�Pt@(+Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**,���/b���1�&
bzQ!�@���/b��� ����M�X;�Pt@(,Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**P-�~�/b���1�&
bz�!�@�~�/b��� ����M�X;�PtO-Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���-�,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**�.n���/b���1�&
bz5!
H@n���/b��� ����M�X;�Pt�6.Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PreDisconnect(0)�**�/熦�/b���1�&
bz7!
H@熦�/b��� ����M�X;�Pt�6/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SetErrorInfo(0x0)�**�0aȼ�/b���1�&
bz5!
H@aȼ�/b��� ����M�X;�Pt�x0Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"DisconnectNotify�**�1�ȼ�/b���1�&
bzI!
H@�ȼ�/b��� ����M�X;�Pt�x1Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfo�**�2�S��/b���1�&
bz'!�@�S��/b��� ����M�X;�Pt�	2Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�3T��/b���1�&
bzA!�@T��/b��� ����M�X;�PtXA3Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�4U��/b���1�&
bzM!�@U��/b��� ����M�X;�PtXA4Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**5�U��/b���1�&
bzQ!�@�U��/b��� ����M�X;�PtXA5Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**�6�H�/b���1�&
bz/!
B@�H�/b��� ����M�X;�Pt�x6Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����fRDP-Tcp#0�**�7��/b���1�&
bzI!
H@��/b��� ����M�X;�Pt�x7Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6ConnectNotify(SessionId=1)�**8+r�/b���1�&
bzS!�@+r�/b��� ����M�X;�PtXA8Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**9�s�/b���1�&
bzS!�@�s�/b��� ����M�X;�Pt�	9Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�:��/b���1�&
bz'!�@��/b��� ����M�X;�Pt�x:Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�;��/b���1�&
bzA!�@��/b��� ����M�X;�PtXA;Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�<�� �/b���1�&
bzM!�@�� �/b��� ����M�X;�Pt�y<Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**=�/$�/b���1�&
bzQ!�@�/$�/b��� ����M�X;�PtD}=Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**>Q�:�/b���1�&
bzo!�@Q�:�/b��� ����M�X;�Pt8}>Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**?^�?�/b���1�&
bzY!�@^�?�/b��� ����M�X;�Pt�y?Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**@l�?�/b���1�&
bzY!�@l�?�/b��� ����M�X;�Pt�	@Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**A�Q@�/b���1�&
bz[!�@�Q@�/b��� ����M�X;�Pt@(AMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**B�]@�/b���1�&
bz[!�@�]@�/b��� ����M�X;�Pt�	BMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**C�C�/b���1�&
bzk!�@�C�/b��� ����M�X;�Pt@(CMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl**D��O�/b���1�&
bz_!�@��O�/b��� ����M�X;�PtXADMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**E5�O�/b���1�&
bz_!�@5�O�/b��� ����M�X;�Pt�	EMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Location**�F���/b���1�&
bz+!�@���/b��� ����M�X;�PtxlFMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdr�**�G>���/b���1�&
bzE!
H@>���/b��� ����M�X;�PtxlGMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�2LogonNotify(SessionId=1)�**�H�|��/b���1�&
bzO!�@�|��/b��� ����M�X;�Pt\HMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���-��8SERVER-PC�**I���/b���1�&
bzo!�@���/b��� ����M�X;�PtxlIMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**J�k��/b���1�&
bzo!�@�k��/b��� ����M�X;�Pt�6JMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�K��\�/b���1�&
bz'!�@��\�/b��� ����M�X;�PtxlKMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�L}���/b���1�&
bz'!�@}���/b��� ����M�X;�PtXALMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�Mѱ��/b���1�&
bz'!�@ѱ��/b��� ����M�X;�PtxlMMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�N���/b���1�&
bz'!�@���/b��� ����M�X;�Pt�yNMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�OnV0b���1�&
bz!k@nV0b��� ����M�X;�Pt�yOMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�**xPZV0b���1�&
bz�!�@ZV0b��� ����M�X;�Pt�yPMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�&$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��x**�QТ*V0b���1�&
bz1!
H@Т*V0b��� ����M�X;�Pt�	QMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�OnDisconnected�**�Rr�*V0b���1�&
bz!f@r�*V0b��� ����M�X;�Pt�	RMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�.�**�S��*V0b���1�&
bz'!�@��*V0b��� ����M�X;�Pt�	SMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW��m0�**�T�*V0b���1�&
bz+!�@�*V0b��� ����M�X;�Pt�	TMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt�**�U%�*V0b���1�&
bz)!�@%�*V0b��� ����M�X;�Pt�	UMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**V<�*V0b���1�&
bza!�@<�*V0b��� ����M�X;�Pt�	VMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**�W��*V0b���1�&
bz)!�@��*V0b��� ����M�X;�Pt�	WMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�**�X��*V0b���1�&
bz5!
H@��*V0b��� ����M�X;�Pt�yXMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�"PreDisconnect(0)�**�Y�*V0b���1�&
bz7!
H@�*V0b��� ����M�X;�Pt�yYMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�$SetErrorInfo(0x0)�**�Zc�*V0b���1�&
bz+!�@c�*V0b��� ����M�X;�Pt�	ZMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**�[�*V0b���1�&
bz+!�@�*V0b��� ����M�X;�Pt�	[Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8\�*V0b���1�&
bz�!�@�*V0b��� ����M�X;�Pt�	\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.018**]�*V0b���1�&
bz_!�@�*V0b��� ����M�X;�Pt�	]Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphics**^L�*V0b���1�&
bze!�@L�*V0b��� ����M�X;�Pt�	^Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**�_i�*V0b���1�&
bz%!�@i�*V0b��� ����M�X;�Pt�	_Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHO�**�`r�*V0b���1�&
bzA!�@r�*V0b��� ����M�X;�Pt�	`Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**�a�*V0b���1�&
bzM!�@�*V0b��� ����M�X;�Pt�	aMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**b�*V0b���1�&
bzQ!�@�*V0b��� ����M�X;�Pt�	bMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**�c��*V0b���1�&
bz'!�@��*V0b��� ����M�X;�Pt�	cMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**�d$�*V0b���1�&
bz)!�@$�*V0b��� ����M�X;�Pt�	dMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsnd�ElfChnke�e����x�c����v���=�����f?�m�MF�}he�PM�=F�*}ER�b�O%t�0�]**0eH�*V0b���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz�!�@H�*V0b��� ����M�X;�Pt�	eMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
cliprdrW0**fV�*V0b���1�&
bzo!�@V�*V0b��� ����M�X;�Pt�	fMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**g*�*V0b���1�&
bzk!�@*�*V0b��� ����M�X;�Pt�	gMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControl]��\**�h��*V0b���1�&
bz'!�@��*V0b��� ����M�X;�Pt�	hMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD\�**�iN�*V0b���1�&
bz'!�@N�*V0b��� ����M�X;�Pt�	iMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD\�**�j5+V0b���1�&
bz'!�@5+V0b��� ����M�X;�Pt�	jMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD\�**�k\+V0b���1�&
bz'!�@\+V0b��� ����M�X;�Pt�	kMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**@l�JIV0b���1�&
bz�!
H@�JIV0b��� ����M�X;�Pt�xlMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM�qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyb@**�m�JIV0b���1�&
bzI!
H@�JIV0b��� ����M�X;�Pt�xmMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6GetServerAutoReconnectInfob�**�n*KIV0b���1�&
bzI!
H@*KIV0b��� ����M�X;�Pt�xnMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6GetServerAutoReconnectInfo72:5�**po!�h0b���1�&
bz�!�@!�h0b��> ���A�&:�t�	oMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]}&b]���_�Oq�잍n��bvA��'�=ConnType
A��'�=ClientIP
 TCP10.0.1.72:54088�&p**8pdn�h0b���1�&
bz�!
A@dn�h0b��> ���A�&:�t�	pMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj���Pj��#_}՘��0
�L��@vA��3�%=ConnectionName
RDP-Tcp#08**�q���h0b���1�&
bz5!
H@���h0b��> ���A�&:�td�qMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"PrepareForAccept�**�r��h0b���1�&
bz1!
H@��h0b��> ���A�&:�td�rMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMSendPolicyData�** s_��h0b���1�&
bzs!�@_��h0b��> ���A�&:�td�sMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���$�S�����T�S8�F�UzD��8vA��+�=
InstanceID
 **t�w�h0b���1�&
bzi!�@�w�h0b��> ���A�&:�tD}tMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2'�b�2Y`X+L�
Wl��:��.vA��!�=error
@=**�u�w�h0b���1�&
bz!�@�w�h0b��> ���A�&:�t�xuMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�b�2'@�**(v�x�h0b���1�&
bzy!�@�x�h0b��> ���A�&:�tD}vMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�*'���*K�WÎXn$5�Ҳ���vA��5�'=StateTransition
A��1�#=
PreviousState
A��9�+=PreviousStateName
A��'�=NewState
A��/�!=NewStateName
A��!�=Event
A��)�=	EventName
A��)�=	ErrorCode
$"RDP_TCPStateUnknownStateDisconnected+Event_Disconnect@�f(**�wy��h0b���1�&
bz1!
H@y��h0b��> ���A�&:�t�	wMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMOnDisconnected�!�**�x>��h0b���1�&
bz9!f@>��h0b��> ���A�&:�t�	xMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0�LNc�T�� �����vIdl�**�yO��h0b���1�&
bz�!�@O��h0b��> ���A�&:�t�	yMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW���2W���S\�*Zg������vA��-�=IdleSeconds
A��/�!=IdleSeconds1
A��/�!=IdleSeconds2
@�}�**�zq��h0b���1�&
bz+!�@q��h0b��> ���A�&:�t�	zMicrosoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinpt@�}�**�{���h0b���1�&
bz)!�@���h0b��> ���A�&:�t�	{Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmd�**|���h0b���1�&
bza!�@���h0b��> ���A�&:�t�	|Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput@�**�}ۄ�h0b���1�&
bz)!�@ۄ�h0b��> ���A�&:�t�	}Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic'!
�**�~�6�h0b���1�&
bz?!�@�6�h0b��� �H��D�v����t�	~Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]} TCP10.0.1.72:54089��**��l�h0b���1�&
bz'!
A@�l�h0b��� �H��D�v����t�	Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�Pj��RDP-Tcp#0�**��]��h0b���1�&
bz5!
H@]��h0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"PrepareForAccept�**��«�h0b���1�&
bz1!
H@«�h0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMSendPolicyData;�Pt�**����h0b���1�&
bz!�@��h0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�S���$)�**h�7=i0b���1�&
bz�!e@7=i0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�
^=F�$�
^6�Q�s�ە�;/H��<vA��/�!=ReasonString
LReason Code: 2(Server Configuration).�h**���=i0b���1�&
bz)!�@�=i0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic@$��**���=i0b���1�&
bz)!�@�=i0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OrdpcmdH�**���=i0b���1�&
bz5!
H@�=i0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"OnStartLicensing�**��o=i0b���1�&
bz5!
H@o=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"AcceptConnection�**0��=i0b���1�&
bz�!h@�=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�+�P�+�UT9P/����i�P��DvA��7�)=TimezoneBiasHour
[1]0**��9=i0b���1�&
bz�!
G@9=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational@���ER@���
�P�Q�������vA��3�%=ConnectionName
A��9�+=DisplayDriverName
RDP-Tcp#0RDPUDDz�**���=i0b���1�&
bzA!
H@�=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM.GetSecurityFilterCredsH�**���.=i0b���1�&
bz7!
H@�.=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM$SendClientLicense�**��c/=i0b���1�&
bz5!
H@c/=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"ProtocolComplete�**��p2=i0b���1�&
bz!b@p2=i0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0�**��2=i0b���1�&
bz!d@2=i0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0a�**���2=i0b���1�&
bz!�@�2=i0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����]M����"VP�F��d�x��lvA��'�=TunnelID
A��1�#=
TransportType
jTCP: Reason Code: 2 (Forced by Server Configuration)b�**���7=i0b���1�&
bzK!
H@�7=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM8AuthenticateClientToSession�**��C=i0b���1�&
bzo!�@�C=i0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational��k�b��kŵmV�K&<�G�E@��4vA��'�=TunnelID
�**���\=i0b���1�&
bz'!
H@�\=i0b��� �H��D�v����t`l�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMPreCreate�**����>i0b���1�&
bzC!�@��>i0b��� �H��D�v����t$
�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operationalb]}$UDP[10.0.1.72]:61300cp#�**p���Ci0b���1�&
bz�!
B@��Ci0b��� �H��D�v����t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}h�2�����\?Z�x�y�|��pvA��3�%=ConnectionName
A��)�=	SessionID
RDP-Tcp#0(p**���Di0b���1�&
bz+!�@�Di0b��� �H��D�v����t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx�**��ՀDi0b���1�&
bz!!@ՀDi0b��� �H��D�v����t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0�**��Di0b���1�&
bzQ!
H@�Di0b��� �H��D�v����t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM>Waiting for graphics subsystem@��**���<Fi0b���1�&
bz+!�@�<Fi0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinptb����**���?Fi0b���1�&
bz#!�@�?Fi0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����]UDPrNa�**���AFi0b���1�&
bz�!�@�AFi0b��� �H��D�v����t�m�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational)�`�%t)�`���S�Ei(��9����vA��)�=	MajorType
A��)�=	MinorType
A��+�=
ServerName
SERVER-PC@�Ѡ**���AFi0b���1�&
bz+!
H@�AFi0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMOnConnectedb����**���AFi0b���1�&
bz#!
H@�AFi0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMOnReadyb����**��3#Gi0b���1�&
bz#!�@3#Gi0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�����]UDP�**��#Gi0b���1�&
bza!�@�#Gi0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInput**�$Gi0b���1�&
bze!�@$Gi0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursor**�&Gi0b���1�&
bz_!�@&Gi0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphicse**����i0b���1�&
bzi!�@���i0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational3́4e�3́4�e.Ub2�UFOe
���vA��%�=Version
A��+�=
ClientMode
A��+�=
AvcEnabled
A��/�!=ProfileIdNum
A��+�=
ServerName

SERVER-PC**����i0b���1�&
bzI!
H@��i0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6ConnectNotify(SessionId=3)'�**(�K�i0b���1�&
bz{!�@K�i0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O`Microsoft::Windows::RDS::Video::Control::v08.01(** �0�i0b���1�&
bzu!�@0�i0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OZMicrosoft::Windows::RDS::Video::Data::v08.01 **���i0b���1�&
bzo!�@��i0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01�**����i0b���1�&
bz'!�@��i0b��� �H��D�v����tD}�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��f��i0b���1�&
bzA!�@f��i0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVCb�**��U��i0b���1�&
bzM!�@U��i0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**���i0b���1�&
bzQ!�@��i0b��� �H��D�v����tD}�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_EnumeratorMoni**�����i0b���1�&
bz5!
H@���i0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"PreDisconnect(0)es�**�����i0b���1�&
bz7!
H@���i0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM$SetErrorInfo(0x0)s�**P�Zj0b���1�&
bz�!�@Zj0b��� �H��D�v����t�/�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���M�,����\/��n?9@��4vA��+�=
MonitorNum
A��/�!=MonitorWidth
A��1�#=
MonitorHeight
A��'�=MonitorX
A��'�=MonitorY
A��+�=
ServerName
�8SERVER-PCP**��Gj0b���1�&
bz5!
H@Gj0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"DisconnectNotifyb�**��GGj0b���1�&
bzI!
H@GGj0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6GetServerAutoReconnectInfo�/b���**��G�,j0b���1�&
bz'!�@G�,j0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**��C�-j0b���1�&
bzA!�@C�-j0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVCb�**����-j0b���1�&
bzM!�@��-j0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**�"�-j0b���1�&
bzQ!�@"�-j0b��� �H��D�v����t���Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator@�**��4�5j0b���1�&
bz/!
B@4�5j0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational����}hRDP-Tcp#0�**���!;j0b���1�&
bzI!
H@�!;j0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM6ConnectNotify(SessionId=1)�**���x=j0b���1�&
bz'!�@�x=j0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdr�**���4>j0b���1�&
bzA!�@�4>j0b��� �H��D�v����t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVC�**����>j0b���1�&
bzM!�@��>j0b��� �H��D�v����t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O2AUDIO_PLAYBACK_LOSSY_DVC�**�&�>j0b���1�&
bzS!�@&�>j0b��� �H��D�v����t�y�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�)�>j0b���1�&
bzS!�@)�>j0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O8TextInput_ServerToClientDVC**�DQ?j0b���1�&
bz[!�@DQ?j0b��� �H��D�v����tD}�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**�2S?j0b���1�&
bz[!�@2S?j0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O@Microsoft::Windows::RDS::Notify**�”Bj0b���1�&
bzY!�@”Bj0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**���Bj0b���1�&
bzY!�@��Bj0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O>Microsoft::Windows::RDS::Input**��Bj0b���1�&
bzQ!�@�Bj0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumerator**�™Bj0b���1�&
bzo!�@™Bj0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�z�Cj0b���1�&
bzo!�@z�Cj0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**���Cj0b���1�&
bzo!�@��Cj0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**�2GDj0b���1�&
bzk!�@2GDj0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControllG**��*Fj0b���1�&
bz_!�@�*Fj0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Locationc**��,Fj0b���1�&
bz_!�@�,Fj0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::LocationW**��(�aj0b���1�&
bz+!�@(�aj0b��� �H��D�v����t�x�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdrb����**��+�j0b���1�&
bzO!�@+�j0b��� �H��D�v����t�L�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational,���M��8SERVER-PC�**���M�j0b���1�&
bzE!
H@�M�j0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM2LogonNotify(SessionId=1)���**��k0b���1�&
bzo!�@�k0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01o**�v/k0b���1�&
bzo!�@v/k0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.019**����Pk0b���1�&
bz'!�@��Pk0b��� �H��D�v����t�w�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD9�**��k�l0b���1�&
bz'!�@k�l0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDs�**���Sm0b���1�&
bz'!�@�Sm0b��� �H��D�v����t�=�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD��**���'�m0b���1�&
bz'!�@�'�m0b��� �H��D�v����t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**������0b���1�&
bz!k@����0b��� �H��D�v����t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0�**x�΍��0b���1�&
bz�!�@΍��0b��� �H��D�v����t��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational���*�*$DRDP_SECFStatePassthrough	FStateErrorFEventCheckAndCompleteReadsFailed��'x**����0b���1�&
bz1!
H@��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsMOnDisconnected
��Mi�**��fR��0b���1�&
bz5!
H@fR��0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM"PreDisconnect(0)os�**��S��0b���1�&
bz7!
H@S��0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMsM$SetErrorInfo(0x0)s�**��V��0b���1�&
bz!f@V��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�L�0t�**��gV��0b���1�&
bz'!�@gV��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalW���2o�**��]W��0b���1�&
bz+!�@]W��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpinptt-W�**��X��0b���1�&
bz)!�@X��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpcmdft-W�**�jX��0b���1�&
bza!�@jX��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OFMicrosoft::Windows::RDS::CoreInputices**��tY��0b���1�&
bz)!�@tY��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordplic�	]�**���Z��0b���1�&
bz+!�@�Z��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpgrfx!�**���Z��0b���1�&
bz+!�@�Z��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Orailenc�**8�@[��0b���1�&
bz�!�@@[��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OnMicrosoft::Windows::RDS::Frame_Buffer::Control::v08.01�	`8**��[��0b���1�&
bz_!�@�[��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�ODMicrosoft::Windows::RDS::Graphicsc**�6\��0b���1�&
bze!�@6\��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OJMicrosoft::Windows::RDS::MouseCursordo**��w\��0b���1�&
bz%!�@w\��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O
ECHOc�**���k��0b���1�&
bzA!�@�k��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O&AUDIO_PLAYBACK_DVCroso�-Windows-Rem��1�&
bzft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsnd�ElfChnk������ x"hÞY��x�v���=�����f?�m�MF�&O�**X�ل��0b���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
bz!�@ل��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OV�4��C�[i/1��R�����vD�	EventDataA��?���oData=ChannelName
A��'�=TunnelID
2AUDIO_PLAYBACK_LOSSY_DVC��1�&X**�����0b���1�&
bzQ!�@����0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�O6RDCamera_Device_Enumeratorg**��r���0b���1�&
bz'!�@r���0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpdrs�**���0b���1�&
bz)!�@�0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ordpsndatio�**��=к�0b���1�&
bz+!�@=к�0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�Ocliprdral�**��z�0b���1�&
bz'!�@z�0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRD�**�����0b���1�&
bzo!�@����0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OTMicrosoft::Windows::RDS::Geometry::v08.01**����0b���1�&
bzk!�@���0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OPMicrosoft::Windows::RDS::DisplayControly**����0b���1�&
bz'!�@��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDe�**�����0b���1�&
bz'!�@���0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDo�**���#��0b���1�&
bz'!�@�#��0b��� �H��D�v����t�	�Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/OperationalV�4�OXPSRDe�**@�P��0b���1�&
bz�!
H@P��0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs��qMs��_����=jD��8vA��+�=
MethodName
"DisconnectNotifyWind@**��{��0b���1�&
bzI!
H@{��0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoices�**����0b���1�&
bzI!
H@��0b��� �H��D�v����t\��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS�9I�QB��'%
��Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational�qMs�6GetServerAutoReconnectInfoTS�9�

Anon7 - 2021