foreach my $key (keys %$hashRef){
	if ($key =~ /EventID/) {
		my $id = ($hashRef->{$key} & 0xffff);
	        print $key . "\t" . "\"$id\"" . "\n";
	}

##</code><code>##

elsif ($key =~ /User/){
	my $sid = unpack("H" . 2 * length(${$hashRef}{$key}), ${$hashRef}{$key});
	my $user = ($hashRef->{$key} & 0xffff);
	print "User SID: " . "\t" . "\"$sid\" " . "\n";
}