Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{54140571-B693-4CEB-81F1-A5E2270E6385}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	19	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3496	4344	n-h1-826752-8	S-1-5-20	8/3/2022 3:01:25 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-81eeb984.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	18	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4320	4400	n-h1-826752-8	S-1-5-20	8/3/2022 3:01:25 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\A3EA5F13-3428-419D-A119-187549D7CC30\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	17	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2960	4532	n-h1-826752-8	S-1-5-20	8/3/2022 3:01:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-8526425b.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	16	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	5024	1404	n-h1-826752-8	S-1-5-20	8/3/2022 3:01:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\E51FAA4D-6BAA-444A-BAFE-D263374B3FF7\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	15	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2976	2996	WIN-5T344G8GM1H	S-1-5-20	8/3/2022 12:59:03 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-4fce3877.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	14	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2744	1104	WIN-5T344G8GM1H	S-1-5-20	8/3/2022 12:59:00 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	13	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3860	3864	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:41:34 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{9928164A-1C40-41A4-ACE3-68B9B966670A}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	12	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2884	3756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:09 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c60eba8f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	11	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	772	1300	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:04 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	10	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3944	3948	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:27:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	9	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3784	3788	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:23:06 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	8	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3244	3248	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:54:51 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	7	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3272	3276	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:50:58 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{EF31D05B-D72E-4A80-BF6C-1C3609667CE6}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	6	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3844	4636	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:17 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-282ca4d2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	5	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4560	3212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	4	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3456	3460	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:24:02 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	3	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3576	3580	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 6:07:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	2	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3672	3676	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:43:10 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x10101.	500	0		4	0	0	576460752303423488	1	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4424	4428	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:17 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]