﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<Events><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:21:18.8926201Z'/><EventRecordID>167</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:21:18.8923992Z'/><EventRecordID>166</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:21:18.8923611Z'/><EventRecordID>165</EventRecordID><Correlation ActivityID='{e053b895-448c-0000-f4b8-53e08c44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:19:21.9010059Z'/><EventRecordID>164</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:19:21.9007788Z'/><EventRecordID>163</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:19:21.9007407Z'/><EventRecordID>162</EventRecordID><Correlation ActivityID='{9a96eea9-448c-0004-aaee-969a8c44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:17:35.9035139Z'/><EventRecordID>161</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:17:35.9032688Z'/><EventRecordID>160</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:17:35.9032304Z'/><EventRecordID>159</EventRecordID><Correlation ActivityID='{5b689ed1-448c-0002-d29e-685b8c44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:11:30.8986941Z'/><EventRecordID>158</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:11:30.8984731Z'/><EventRecordID>157</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:11:30.8984346Z'/><EventRecordID>156</EventRecordID><Correlation ActivityID='{81da09bf-448b-0004-c009-da818b44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:08:56.9242996Z'/><EventRecordID>155</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:08:56.9240561Z'/><EventRecordID>154</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T02:08:56.9240175Z'/><EventRecordID>153</EventRecordID><Correlation ActivityID='{260f824b-448b-0004-4c82-0f268b44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:57:15.8948468Z'/><EventRecordID>152</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:57:15.8946282Z'/><EventRecordID>151</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:57:15.8945905Z'/><EventRecordID>150</EventRecordID><Correlation ActivityID='{843b64ff-4489-0004-0065-3b848944dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:53:35.8945825Z'/><EventRecordID>149</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:53:35.8943469Z'/><EventRecordID>148</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:53:35.8943091Z'/><EventRecordID>147</EventRecordID><Correlation ActivityID='{011a0f75-4489-0006-760f-1a018944dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:25:17.0128204Z'/><EventRecordID>146</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:25:17.0126006Z'/><EventRecordID>145</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-24T01:25:17.0125626Z'/><EventRecordID>144</EventRecordID><Correlation ActivityID='{0c6b3ba9-4485-0004-aa3b-6b0c8544dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T17:02:10.9617750Z'/><EventRecordID>143</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T17:02:10.9615506Z'/><EventRecordID>142</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T17:02:10.9615124Z'/><EventRecordID>141</EventRecordID><Correlation ActivityID='{c42929cc-443e-0004-cd29-29c43e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T16:58:12.9691819Z'/><EventRecordID>140</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T16:58:12.9689616Z'/><EventRecordID>139</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T16:58:12.9689228Z'/><EventRecordID>138</EventRecordID><Correlation ActivityID='{364d3f8d-443e-0002-8e3f-4d363e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:51:20.9469424Z'/><EventRecordID>137</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:51:20.9467107Z'/><EventRecordID>136</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:51:20.9466722Z'/><EventRecordID>135</EventRecordID><Correlation ActivityID='{def903e8-4434-0004-e903-f9de3444dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:49:33.9656334Z'/><EventRecordID>134</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:49:33.9654027Z'/><EventRecordID>133</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:49:33.9653647Z'/><EventRecordID>132</EventRecordID><Correlation ActivityID='{9f2fb95b-4434-0004-5cb9-2f9f3444dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:21:36.0054425Z'/><EventRecordID>131</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:21:36.0052201Z'/><EventRecordID>130</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:21:36.0051819Z'/><EventRecordID>129</EventRecordID><Correlation ActivityID='{b7053f2f-4430-0002-303f-05b73044dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:09:02.1200447Z'/><EventRecordID>128</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:09:02.1198186Z'/><EventRecordID>127</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:09:02.1197801Z'/><EventRecordID>126</EventRecordID><Correlation ActivityID='{f5af6dbd-442e-0004-be6d-aff52e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:51.8564476Z'/><EventRecordID>125</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:51.8562114Z'/><EventRecordID>124</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:51.8561733Z'/><EventRecordID>123</EventRecordID><Correlation ActivityID='{a81d8d62-442e-0004-638d-1da82e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:02.8552554Z'/><EventRecordID>122</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:02.8550337Z'/><EventRecordID>121</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:06:02.8549959Z'/><EventRecordID>120</EventRecordID><Correlation ActivityID='{8ae8bdd1-442e-0004-d2bd-e88a2e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:04:00.8959786Z'/><EventRecordID>119</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:04:00.8957572Z'/><EventRecordID>118</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:04:00.8957194Z'/><EventRecordID>117</EventRecordID><Correlation ActivityID='{423104b2-442e-0002-b404-31422e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:02:08.9604792Z'/><EventRecordID>116</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:02:08.9602603Z'/><EventRecordID>115</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T15:02:08.9602223Z'/><EventRecordID>114</EventRecordID><Correlation ActivityID='{ff6f2c3b-442d-0004-3c2c-6fff2d44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:54:09.5908974Z'/><EventRecordID>113</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:54:09.5906775Z'/><EventRecordID>112</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:54:09.5906397Z'/><EventRecordID>111</EventRecordID><Correlation ActivityID='{8026cd72-4424-0002-73cd-26802444dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:19:19.4627899Z'/><EventRecordID>110</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:19:19.4625687Z'/><EventRecordID>109</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:19:19.4625306Z'/><EventRecordID>108</EventRecordID><Correlation ActivityID='{a26a1bd5-441f-0000-341c-6aa21f44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:10:56.5130969Z'/><EventRecordID>107</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:10:56.5128717Z'/><EventRecordID>106</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:10:56.5128331Z'/><EventRecordID>105</EventRecordID><Correlation ActivityID='{769a66ad-441e-0002-ae66-9a761e44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:06:37.5057000Z'/><EventRecordID>104</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:06:37.5054723Z'/><EventRecordID>103</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:06:37.5054341Z'/><EventRecordID>102</EventRecordID><Correlation ActivityID='{dc3a22e7-441d-0006-e822-3adc1d44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:01:21.4625822Z'/><EventRecordID>101</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:01:21.4623527Z'/><EventRecordID>100</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T13:01:21.4623146Z'/><EventRecordID>99</EventRecordID><Correlation ActivityID='{1fe05bd5-441d-0004-d65b-e01f1d44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T12:42:18.4764633Z'/><EventRecordID>98</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T12:42:18.4762343Z'/><EventRecordID>97</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T12:42:18.4761961Z'/><EventRecordID>96</EventRecordID><Correlation ActivityID='{769866fc-441a-0004-fd66-98761a44dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-23T08:23:33.9768340Z'/><EventRecordID>95</EventRecordID><Correlation ActivityID='{5140ec2e-43f6-0002-85ec-4051f643dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T18:09:19.1549961Z'/><EventRecordID>94</EventRecordID><Correlation ActivityID='{fae496ad-437e-0004-ae96-e4fa7e43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:48:16.1776383Z'/><EventRecordID>93</EventRecordID><Correlation ActivityID='{468d4758-436b-0002-5947-8d466b43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:47:14.3571593Z'/><EventRecordID>92</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='224'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{d2bda982-ccf6-4344-ac5b-0b44427b6816}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>BE93D7B56CDFBD317CF29DBE54240CE5E8CF52C7ABE28730B33558353FFB8D4D</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {d2bda982-ccf6-4344-ac5b-0b44427b6816}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:47:14.3568658Z'/><EventRecordID>91</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='224'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>31</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Driver Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.27805.0</Data><Data Name='PolicyGUID'>{d2bda982-ccf6-4344-ac5b-0b44427b6816}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x80880200</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B751601D6165D9D505F60057AD479417F68C6B574E9F2AADA3991D130916C74F</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {d2bda982-ccf6-4344-ac5b-0b44427b6816} Microsoft Windows Driver Policy. id 10.0.27805.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3116</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:47:14.3567477Z'/><EventRecordID>90</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='224'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='PublisherNameLength'>17</Data><Data Name='PublisherName'>Microsoft Windows</Data><Data Name='IssuerNameLength'>37</Data><Data Name='IssuerName'>Microsoft Windows Production PCA 2011</Data><Data Name='PublisherTBSHashSize'>32</Data><Data Name='PublisherTBSHash'>2876EFE22DA66D0C68FDAC2D0CB9529A345D05988377E745DAE81E66CB02E3FA</Data><Data Name='IssuerTBSHashSize'>32</Data><Data Name='IssuerTBSHash'>4E80BE107C860DE896384B3EFF50504DC2D76AC7151DF3102A4450637A032146</Data><Data Name='EKUsSize'>21</Data><Data Name='EKUs'>020A2B0601040182370A0306082B06010505070303</Data><Data Name='KnownRoot'>6</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for Code Integrity policy ID {a072029f-588b-4b5e-b7f9-05aad67df687}.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3099</EventID><Version>2</Version><Level>4</Level><Task>21</Task><Opcode>131</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:47:14.3565143Z'/><EventRecordID>89</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='224'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyNameLength'>54</Data><Data Name='PolicyNameBuffer'>Microsoft Windows Virtualization Based Security Policy</Data><Data Name='PolicyIdLength'>12</Data><Data Name='PolicyIdBuffer'>10.0.29459.0</Data><Data Name='PolicyGUID'>{a072029f-588b-4b5e-b7f9-05aad67df687}</Data><Data Name='Status'>0x0</Data><Data Name='Options'>0x90800000</Data><Data Name='PolicyHashSize'>32</Data><Data Name='PolicyHash'>B120EB25EC2274277FFD09A96ADF8B12E2AA9392FF476A7604D863B941943D7D</Data><Data Name='OptionsV2'>0x0</Data></EventData><RenderingInfo Culture='en-US'><Message>Refreshed and activated Code Integrity policy {a072029f-588b-4b5e-b7f9-05aad67df687} Microsoft Windows Virtualization Based Security Policy. id 10.0.29459.0. Status 0x0</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:47:14.3564766Z'/><EventRecordID>88</EventRecordID><Correlation ActivityID='{2197dfcb-436b-0000-6de0-97216b43dc01}'/><Execution ProcessID='4' ThreadID='224'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T15:40:44.3487502Z'/><EventRecordID>87</EventRecordID><Correlation ActivityID='{3921296a-436a-0004-6b29-21396a43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:59:31.3025088Z'/><EventRecordID>86</EventRecordID><Correlation ActivityID='{2cd44ed4-4332-0000-2c4f-d42c3243dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.7128760Z'/><EventRecordID>85</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-59bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.7128750Z'/><EventRecordID>84</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-59bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.6857087Z'/><EventRecordID>83</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0001-0fb8-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.6857077Z'/><EventRecordID>82</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0001-0fb8-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.5986711Z'/><EventRecordID>81</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-38bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.5986702Z'/><EventRecordID>80</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-38bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.5910704Z'/><EventRecordID>79</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0006-f3bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:58:47.5910688Z'/><EventRecordID>78</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0006-f3bd-56522b43dc01}'/><Execution ProcessID='460' ThreadID='1704'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.3863865Z'/><EventRecordID>77</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-8fba-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.3863855Z'/><EventRecordID>76</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-8fba-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.3607339Z'/><EventRecordID>75</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-7bba-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.3607329Z'/><EventRecordID>74</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-7bba-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.2749570Z'/><EventRecordID>73</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-0cbe-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.2749560Z'/><EventRecordID>72</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-0cbe-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.2675268Z'/><EventRecordID>71</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-07be-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:19:43.2675258Z'/><EventRecordID>70</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-07be-56522b43dc01}'/><Execution ProcessID='3448' ThreadID='4800'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:42.0907709Z'/><EventRecordID>69</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-fdb9-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:42.0907698Z'/><EventRecordID>68</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-fdb9-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:42.0624487Z'/><EventRecordID>67</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0005-32b6-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:42.0624471Z'/><EventRecordID>66</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0005-32b6-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:41.9695468Z'/><EventRecordID>65</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0000-97bb-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:41.9695458Z'/><EventRecordID>64</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0000-97bb-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:41.9617169Z'/><EventRecordID>63</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-2fb9-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:14:41.9617160Z'/><EventRecordID>62</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0004-2fb9-56522b43dc01}'/><Execution ProcessID='2724' ThreadID='2732'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.7646885Z'/><EventRecordID>61</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-c6bb-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.7646875Z'/><EventRecordID>60</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-c6bb-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.7346144Z'/><EventRecordID>59</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0007-2ab6-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.7346135Z'/><EventRecordID>58</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0007-2ab6-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.6115937Z'/><EventRecordID>57</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-abbb-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.6115926Z'/><EventRecordID>56</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-abbb-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.5980442Z'/><EventRecordID>55</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0006-ffb7-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:12:40.5980430Z'/><EventRecordID>54</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0006-ffb7-56522b43dc01}'/><Execution ProcessID='4060' ThreadID='4032'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:10:28.0586382Z'/><EventRecordID>53</EventRecordID><Correlation ActivityID='{5256b4bc-432b-0002-13b5-56522b43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:08:24.0165885Z'/><EventRecordID>52</EventRecordID><Correlation ActivityID='{086dcf08-432b-0002-09cf-6d082b43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:06:18.1538106Z'/><EventRecordID>51</EventRecordID><Correlation ActivityID='{bd53bc05-432a-0002-5cbc-53bd2a43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T08:03:34.1083847Z'/><EventRecordID>50</EventRecordID><Correlation ActivityID='{5b93524a-432a-0002-4b52-935b2a43dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.5864617Z'/><EventRecordID>49</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-158c-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.5864607Z'/><EventRecordID>48</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-158c-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.5611126Z'/><EventRecordID>47</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-018c-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.5611115Z'/><EventRecordID>46</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-018c-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.4789435Z'/><EventRecordID>45</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d58b-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.4789425Z'/><EventRecordID>44</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d58b-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.4713975Z'/><EventRecordID>43</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d08b-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:55:13.4713963Z'/><EventRecordID>42</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d08b-26e62743dc01}'/><Execution ProcessID='4408' ThreadID='4324'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.3097007Z'/><EventRecordID>41</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d58a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.3096997Z'/><EventRecordID>40</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d58a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.2835546Z'/><EventRecordID>39</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-c18a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.2835532Z'/><EventRecordID>38</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-c18a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.1952471Z'/><EventRecordID>37</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-a68a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.1952460Z'/><EventRecordID>36</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-a68a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.1869483Z'/><EventRecordID>35</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-5f8a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:50:12.1869474Z'/><EventRecordID>34</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-5f8a-26e62743dc01}'/><Execution ProcessID='1416' ThreadID='1424'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:11.0208760Z'/><EventRecordID>33</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d689-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:11.0208751Z'/><EventRecordID>32</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-d689-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.9921697Z'/><EventRecordID>31</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-c289-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>CD0B5435BC3E8258CBC698BBE01A0B4FC3F057E4E2E4BB65DC978E3B835BF2F8</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.9921687Z'/><EventRecordID>30</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-c289-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>49</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\fcon.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.8694832Z'/><EventRecordID>29</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-9889-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.8694821Z'/><EventRecordID>28</EventRecordID><Correlation ActivityID='{e6268318-4327-0002-9889-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.8562215Z'/><EventRecordID>27</EventRecordID><Correlation ActivityID='{e6268318-4327-0004-df87-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>FBBE7EB777F287DF9B8A639E7A826BBF6BE7EA2CCB634338F86C46E366FCC207</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:48:10.8562204Z'/><EventRecordID>26</EventRecordID><Correlation ActivityID='{e6268318-4327-0004-df87-26e62743dc01}'/><Execution ProcessID='3492' ThreadID='3484'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='FileNameLength'>50</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\System32\aepic.dll</Data><Data Name='SecureRequired'>0x2</Data><Data Name='RequestedSigningLevel'>12</Data><Data Name='ProcessNameLength'>59</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\System32\WerFaultSecure.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T07:45:58.2171873Z'/><EventRecordID>25</EventRecordID><Correlation ActivityID='{e6268318-4327-0000-1a83-26e62743dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T03:39:08.9838327Z'/><EventRecordID>24</EventRecordID><Correlation ActivityID='{6b4c6ffa-4305-0002-5270-4c6b0543dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T03:37:54.1339810Z'/><EventRecordID>23</EventRecordID><Correlation ActivityID='{3e9858d2-4305-0004-d358-983e0543dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T03:33:25.1698507Z'/><EventRecordID>22</EventRecordID><Correlation ActivityID='{9e423463-4304-0004-6434-429e0443dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T03:22:02.2097056Z'/><EventRecordID>21</EventRecordID><Correlation ActivityID='{0728ac88-4303-0004-89ac-28070343dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-22T02:52:05.0202678Z'/><EventRecordID>20</EventRecordID><Correlation ActivityID='{d8103c66-42fe-0004-673c-10d8fe42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T16:56:51.0868318Z'/><EventRecordID>19</EventRecordID><Correlation ActivityID='{b0dc4f9d-42ab-0002-f44f-dcb0ab42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T16:40:27.0845589Z'/><EventRecordID>18</EventRecordID><Correlation ActivityID='{6659d307-42a9-0004-08d3-5966a942dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T15:57:41.0721097Z'/><EventRecordID>17</EventRecordID><Correlation ActivityID='{6ce54c25-42a3-0004-264c-e56ca342dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T15:28:15.9014268Z'/><EventRecordID>16</EventRecordID><Correlation ActivityID='{50dfac4b-429f-0002-a3ac-df509f42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T11:54:52.9040964Z'/><EventRecordID>15</EventRecordID><Correlation ActivityID='{81b0e892-4281-0002-e9e8-b0818142dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T11:29:07.9567729Z'/><EventRecordID>14</EventRecordID><Correlation ActivityID='{e8cc9e76-427d-0002-779e-cce87d42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T11:26:41.9516498Z'/><EventRecordID>13</EventRecordID><Correlation ActivityID='{91c6c7b3-427d-0002-0ac8-c6917d42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T11:24:45.0813797Z'/><EventRecordID>12</EventRecordID><Correlation ActivityID='{4c0a00ba-427d-0002-1101-0a4c7d42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T11:07:39.8851865Z'/><EventRecordID>11</EventRecordID><Correlation ActivityID='{e91768ba-427a-0006-bb68-17e97a42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3084</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T05:13:23.9800467Z'/><EventRecordID>10</EventRecordID><Correlation ActivityID='{6b873534-4249-0002-8b35-876b4942dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will enable WHQL driver enforcement for this boot session.  Settings 0x0. Exemption 1.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3085</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:45:17.0253611Z'/><EventRecordID>9</EventRecordID><Correlation ActivityID='{7dff6f89-4245-0004-8a6f-ff7d4542dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3085</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T02:46:53.9365748Z'/><EventRecordID>8</EventRecordID><Correlation ActivityID='{f44543d1-4234-0000-2844-45f43442dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3085</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-20T21:50:20.2603685Z'/><EventRecordID>7</EventRecordID><Correlation ActivityID='{86718e08-420b-0004-098e-71860b42dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3085</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:59:02.7908289Z'/><EventRecordID>6</EventRecordID><Correlation ActivityID='{b44fbb6f-4279-0004-7cbb-4fb47942dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>DESKTOP-ESALTHH</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:58:10.3169706Z'/><EventRecordID>5</EventRecordID><Correlation ActivityID='{6e2b7da3-4279-0004-9d8d-2b6e7942dc01}'/><Execution ProcessID='2116' ThreadID='2312'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>WIN-FFSP8BHNDP8</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>4471DFD6382D77391950598760BD397D04EBB68C6A587851D9993174F8512AA0</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:58:10.3169698Z'/><EventRecordID>4</EventRecordID><Correlation ActivityID='{6e2b7da3-4279-0004-9d8d-2b6e7942dc01}'/><Execution ProcessID='2116' ThreadID='2312'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>WIN-FFSP8BHNDP8</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FileNameLength'>79</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe</Data><Data Name='SecureRequired'>0x12</Data><Data Name='RequestedSigningLevel'>4</Data><Data Name='ProcessNameLength'>75</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3089</EventID><Version>3</Version><Level>4</Level><Task>1</Task><Opcode>130</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:58:10.3160001Z'/><EventRecordID>3</EventRecordID><Correlation ActivityID='{6e2b7da3-4279-0004-9b8d-2b6e7942dc01}'/><Execution ProcessID='2320' ThreadID='2340'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>WIN-FFSP8BHNDP8</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TotalSignatureCount'>0</Data><Data Name='Signature'>0</Data><Data Name='CacheState'>0</Data><Data Name='Hash Size'>32</Data><Data Name='Hash'>47A9F48B731FBFDC68515AB1991655AEC8C036F399C1BDEF4D1EB0396D7ECD9E</Data><Data Name='PageHash'>true</Data><Data Name='SignatureType'>0</Data><Data Name='ValidatedSigningLevel'>0</Data><Data Name='VerificationError'>0</Data><Data Name='Flags'>8</Data><Data Name='PolicyBits'>0</Data><Data Name='NotValidBefore'>1601-01-01T00:00:00.0000000Z</Data><Data Name='NotValidAfter'>1601-01-01T00:00:00.0000000Z</Data><Data Name='PublisherNameLength'>7</Data><Data Name='PublisherName'>Unknown</Data><Data Name='IssuerNameLength'>7</Data><Data Name='IssuerName'>Unknown</Data><Data Name='PublisherTBSHashSize'>0</Data><Data Name='PublisherTBSHash'></Data><Data Name='IssuerTBSHashSize'>0</Data><Data Name='IssuerTBSHash'></Data><Data Name='OPUSInfoLength'>4</Data><Data Name='OPUSInfo'>None</Data><Data Name='EKUsSize'>0</Data><Data Name='EKUs'></Data><Data Name='KnownRoot'>0</Data></EventData><RenderingInfo Culture='en-US'><Message>Signature information for another event. Match using the Correlation Id.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3002</EventID><Version>1</Version><Level>2</Level><Task>1</Task><Opcode>102</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:58:10.3159988Z'/><EventRecordID>2</EventRecordID><Correlation ActivityID='{6e2b7da3-4279-0004-9b8d-2b6e7942dc01}'/><Execution ProcessID='2320' ThreadID='2340'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>WIN-FFSP8BHNDP8</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FileNameLength'>81</Data><Data Name='FileNameBuffer'>\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe</Data><Data Name='SecureRequired'>0x12</Data><Data Name='RequestedSigningLevel'>4</Data><Data Name='ProcessNameLength'>77</Data><Data Name='ProcessNameBuffer'>\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.</Message><Level>Error</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-CodeIntegrity' Guid='{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}'/><EventID>3085</EventID><Version>0</Version><Level>4</Level><Task>20</Task><Opcode>127</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2025-10-21T10:57:05.4292679Z'/><EventRecordID>1</EventRecordID><Correlation ActivityID='{6e2b7da3-4279-0000-1e7e-2b6e7942dc01}'/><Execution ProcessID='4' ThreadID='8'/><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Computer>WIN-FFSP8BHNDP8</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Settings'>0x0</Data><Data Name='Exemption'>1</Data></EventData><RenderingInfo Culture='en-US'><Message>Code Integrity will disable WHQL driver enforcement for this boot session.  Settings 0x0.</Message><Level>Information</Level><Task></Task><Opcode></Opcode><Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel><Provider>Microsoft-Windows-CodeIntegrity</Provider><Keywords></Keywords></RenderingInfo></Event></Events>