- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />
  <EventID Qualifiers="32768">1074</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2024-06-21T15:42:01.4957443Z" />
  <EventRecordID>49769</EventRecordID>
  <Correlation />
  <Execution ProcessID="1436" ThreadID="5480" />
  <Channel>System</Channel>
  <Computer>Anthony</Computer>
  <Security UserID="S-1-5-21-3923275291-1176481025-2712055739-1001" />
  </System>
- <EventData>
  <Data Name="param1">C:\Windows\System32\RuntimeBroker.exe (ANTHONY)</Data>
  <Data Name="param2">ANTHONY</Data>
  <Data Name="param3">Autre (non planifié)</Data>
  <Data Name="param4">0x0</Data>
  <Data Name="param5">se mettre hors tension.</Data>
  <Data Name="param6" />
  <Data Name="param7">Anthony\antho</Data>
  </EventData>
  </Event>