ElfFilejElfChnkȰn**V1_ ~]&~]t}2xYAMM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemA\{Provider9=KNameVMUpgradeHelperAM}aEventID') QualifiersdLevelE{Task$jKeywordsAPD; TimeCreated'mj<{ SystemTime .F EventRecordID 8aChannel Application<D;nComputer FILF-APP-RECABR.SecurityufLUserID ! !1_V F"F%g>9{p(xlID EventDataqoData !Binaryt\**@Va^ E'bE'bUa4UxLIDwEAMsj5http://schemas.microsoft.com/win/2004/08/events/eventXA-$F=)GuidA}  " Version    IOpcode AD m  A Correlation\Fq ActivityID}5RelatedActivityID Am7 ExecutionHF\  ProcessID 9ThreadID  " FILF-APP-RECAR u !  *=!a^VMicrosoft-Windows-WMIS FF[Application & &| p)cI@**VȬ_ ?6 &?Y+e"Hl/AMsj5http://schemas.microsoft.com/win/2004/08/events/event1A@7=Windows Error ReportingA}    AD m    Application" FILF-APP-RECAR u ! q!Ȭ_V F"N0APPCRASHNot available0DbSecuritySpt.exe0.0.0.053db7aaeDbSecuritySpt.exe0.0.0.053db7aaec00000050000dd19C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DbSecuritySpt.ex_19284aa9834f1943c27e99f729111ede7dca01b_e666932a_012890c609a8e0557-39a7-11e4-80bf-005056a25b290**VȬ_ .ȩbF)IXjAMsj5http://schemas.microsoft.com/win/2004/08/events/event)AF=Microsoft-Windows-ComplusF&{0f177893-4a9c-4709-b921-f432d67f43d5}}R`EventSourceNameCOM+A}      I AD m  AFA7 F\     Application" FILF-APP-RECAR u ! C! @Ȭ_V {vE`Qi^_IA#q=param1 A#q=param2 A#q=param3  2@86400SuppressDuplicateDurationSoftware\Microsoft\COM3\Eventlog**PV^E` ,qe,qe3' vAMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Microsoft-Windows-MSDTC 2F&{5D9E0020-3761-4f36-90C8-38CE6511BD12}}MSDTC 2A}      I AD m  AFA7 F\     Application" FILF-APP-RECAR u ! !j@^E`V A,A9'YG IA#q=param1 A#q=param2 A#q=param3 A#q=param4 A#q=param5 A#q=param6 A#q=param7 A#q=param8 A#q=param9 A%q=param10 A%q=param11 A%q=param12  <60000001Mutual Authentication RequiredNT AUTHORITY\NetworkService0014aP**V8嘴  > CdIpfAMsj5http://schemas.microsoft.com/win/2004/08/events/event!A0'=vmStatsProviderA}    AD m    Application" FILF-APP-RECAR u ! #!8嘴V F"**V8嘴  > 9!8嘴V F"root\cimv2V**V \>\>KُGAMsj5http://schemas.microsoft.com/win/2004/08/events/eventKAF=Microsoft-Windows-Security-SPPF&{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}}$Software Protection Platform ServiceA}      I AD m  AFA7 F\     Application" FILF-APP-RECAR u ! 1!@V F"<none>**VT3 P"P0eTuf( AMsj5http://schemas.microsoft.com/win/2004/08/events/event A=ESENTA}    AD m    Application" FILF-APP-RECAR u ! a!fT3V F">svchost1128060396000000**VT3 P" %!iT3V F"svchost112800[1] 0.000, [2] 0.000, [3] 0.016, [4] 0.234, [5] 0.000, [6] 0.000, [7] 0.016, [8] 0.000, [9] 0.000, [10] 0.000.**pVT3 P" !FT3V F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.031, [3] 0.000, [4] 0.000, [5] 0.015, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.1 0p**pVT3 P" !GT3V F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.016, [12] 0.000.0 0&p**`VT3 P" !FT3V F"svchost11281C:\Windows\system32\LogFiles\Sum\Current.mdb0[1] 0.000, [2] 0.015, [3] 0.000, [4] 0.000, [5] 0.016, [6] 0.031, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.1 0c`**`VT3 P" !GT3V F"svchost11281C:\Windows\system32\LogFiles\Sum\Current.mdb0[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.0 0`**(V˧ \> y!*@˧V F"VC:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 **(**pVd P" !FdV F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.000, [3] 0.015, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.1 0p**pVd P" !GdV F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.0 0p**pVd P" !FdV F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.000, [3] 0.015, [4] 0.000, [5] 0.016, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.1 0p**pVd P" !GdV F"svchost11281C:\Windows\system32\LogFiles\Sum\SystemIdentity.mdb0[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.016, [12] 0.000.0 0p**`Vd P" !FdV F"svchost11281C:\Windows\system32\LogFiles\Sum\Current.mdb0[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.1 0`**Vd \> c! @dV F"@Security-SPP-WriteWauMarker500**(Vd \> {! @dV F"X(DFSN-ServerService-StandaloneRootLimit) (FailoverCluster-ClusWMI-IsClusterEnabled) (IIS-W3SVC-MaxConcurrentRequests) (MathRecognizerEventsLicensing-EnableMathRecognizer) (Microsoft-Windows-CertificateServices-CA-AdvancedTemplateSupport) (Microsoft-Windows-CertificateServices-CA-CertificateManagerRestrictionSupport) (Microsoft-Windows-CertificateServices-CA-CrossForestEnrollmentSupport) (Microsoft-Windows-CertificateServices-CA-ExitModuleSMTPSupport) (Microsoft-Windows-CertificateServices-CA-RoleSeparationSupport) (Microsoft-Windows-Fax-Common-DeviceLimit) (Microsoft-Windows-Fax-Common-EnableServerPolicy) (Microsoft-Windows-OfflineFiles-Core-BranchCachingEnabled) (Microsoft-Windows-OfflineFiles-Core-FeatureEnabled) (Microsoft-Windows-SensorsLicense-EnableCPL) (Microsoft.Windows.Smc-Enabled) (PeerToPeerBase-IdManager-EnabledPolicy) (PeerToPeerBase-Pnrp-EnabledPolicy) (Personalization-Enabled) (Printing-Spooler-Pmc-Licensing-Enabled) (SecureStartupFeature-Enabled) (SecureStartupFeature-Enabled-Driver) (SecureStartupFeature-Enabled-Premium) (SecureStartupFeature-PerfWarning) (Security-SPP-Reserved-EnableNotificationMode) (SnippingToolLicensing-Enabled) (TSProxy-EdgeAdapter-MaxConnections) (TabletPC-MathInputLicensing-EnableMathInput) (TabletPCCoreInkRecognitionLicensing-EnableText) (TabletPCInputPanel-EnableTIP) (TabletPCInputPanel-EnableTIPSynced) (TabletPCInputPersonalization-EnablePersonalization) (TabletPCPlatformInput-core-MultiTouchGestures) (TabletPCPlatformInput-core-SFP) (Telnet-Client-EnableTelnetClient) (Telnet-Server-EnableTelnetServer) (TiffIFilterLicensing-EnableTiffIFilter) (WMPPlayer-HMEAllowed) (WinStoreUI-Enabled) (microsoft-windows-virtualization-licensing-EnableHyperVReplica) (nfs-admincmdtools-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (nfs-servercmdtools-enabled) (nfs-servercore-enabled) (psync-Enabled) (snis-Enabled) 55c92734-d682-4d71-983e-d6ec3f16059f979d2e65-04b7-44c9-9d7b-ef4028168cba&(**0 Vd \>  !@dV F"` 55c92734-d682-4d71-983e-d6ec3f16059f 1: 439e8c91-ff38-4ecb-ba0b-32658680c952, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 5b338ef7-8d99-45cb-bb59-618bd328b4a4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 979d2e65-04b7-44c9-9d7b-ef4028168cba, 1, 0 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )] 4: acf1b4fd-1c55-4f2d-a60b-415ac958ad88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 5: b3ca044e-a358-4d68-9883-aaa2941aca99, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 6: c6b0fae3-70ea-4a98-95f2-587dc1ea4131, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: c7e5dd52-ef14-4bf6-bc71-1bf5f5794cd0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: d3081572-e3f0-49f5-8b83-ec763c014570, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: dcb88f6f-b090-405b-850e-dabcccf3693f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 10: f002931d-5536-4908-8d93-40ae584e24d6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: 9d0bb49b-21a1-4354-9981-ec5dd9393961, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 0 **Vd \> A!@dV F"6.3.9600.16497**V$F \> e!@@$FV F"B2114-08-18T11:37:12ZRulesEngine**V$F \> #!@$FV F"**0V'̴ 9Fc9z8?;(AMsj5http://schemas.microsoft.com/win/2004/08/events/event A=VSSA}    AD m    Application" FILF-APP-RECAR u ! ! '̴V F"- Code: CORSVCC00000768- Call: CORSVCC00000750- PID: 00001740- TID: 00001864- CMD: C:\Windows\system32\vssvc.exe - User: Name: NT AUTHORITY\SYSTEM, SID:S-1-5-18 &0**V  > #!V F"YV**V  > 9!V F"root\cimv2 &**V  > #!V F"[V**V  > 9!V F"root\cimv2 &**V+U Ti6 T%Bqvq4A Msj5http://schemas.microsoft.com/win/2004/08/events/event\AF=A}      I AD m  AF A7 F\    " FILF-APP-RECAR u $k5DUserData!  4h!+U L VMicrosoft-Windows-LoadPerf.GAeшm@Application ƞ$lƞ$ЏKA#m]EventXMLjLoadPerf fmzparam1  mzparam2 0mkbinaryDataSize (m= binaryData  WmiApRplWmiApRpl **`Vn` Ti  4W!n` L VMicrosoft-Windows-LoadPerf.GAeшm@Application ƞ$lWmiApRplWmiApRplTU>q`**hVc ^o>^8:"?İP ;AMsj5http://schemas.microsoft.com/win/2004/08/events/eventAF=Microsoft-Windows-PerflibF&{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}}PerflibA}      I AD m  AFA7 F\     Application" FILF-APP-RECAR u  k! !cV |=1s|=.z a `RqAe#mjPerflib fm  m  m  m @BITSC:\Windows\System32\bitsperf.dllh**Vc  > #!cV F"&**Vc  > 9!cV F"root\cimv2**V<  > #!<V F"&**V<  > 9!<V F"root\cimv2**V<  > #!<V F"&**V<  > 9!<V F"root\cimv2**V.  > #!.V F"&**V.  > 9!.V F"root\cimv2**Vv  > #!vV F"&**Vv  > 9!vV F"root\cimv2**Vv  > #!vV F"&**Vv  > 9!vV F"root\cimv2**V   > #! V F"&**V   > 9! V F"root\cimv2**V,0B  > #!,0BV F"&**V,0B  > 9!,0BV F"root\cimv2**V,0B  > #!,0BV F"&**V,0B  > 9!,0BV F"root\cimv2**VRſ  > #!RſV F"&**VRſ  > 9!RſV F"root\cimv2**Vq   > #!q V F"&**Vq   > 9!q V F"root\cimv2**Vq   > #!q V F"&**Vq   > 9!q V F"root\cimv2**V  > #!V F"&**W  > 9!W F"root\cimv2**W  > #!W F"&**W  > 9!W F"root\cimv2**W  > #!W F"&**W  > 9!W F"root\cimv2**W n؉C"n؉C+2b~lOAMsj5http://schemas.microsoft.com/win/2004/08/events/eventA*!= VMware ToolsA}    AD m    Application" FILF-APP-RECAR u !  !W F"l[ warning] [vmsvc:guestinfo] Failed to get nic info. F**Wq[  > #!q[W F" F**Wq[  > 9!q[W F"root\cimv208/**W  > #!W F"m** W  > 9! W F"root\cimv2** W  > #! W F"** W  > 9! W F"root\cimv2c** W \> I!@ W F"&caller=svchost.exeV**( W \> y!*@ W F"VC:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 (**0 W \>  !@W F"` 55c92734-d682-4d71-983e-d6ec3f16059f 1: 439e8c91-ff38-4ecb-ba0b-32658680c952, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 5b338ef7-8d99-45cb-bb59-618bd328b4a4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 979d2e65-04b7-44c9-9d7b-ef4028168cba, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )] 4: acf1b4fd-1c55-4f2d-a60b-415ac958ad88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 5: b3ca044e-a358-4d68-9883-aaa2941aca99, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 6: c6b0fae3-70ea-4a98-95f2-587dc1ea4131, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: c7e5dd52-ef14-4bf6-bc71-1bf5f5794cd0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: d3081572-e3f0-49f5-8b83-ec763c014570, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: dcb88f6f-b090-405b-850e-dabcccf3693f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 10: f002931d-5536-4908-8d93-40ae584e24d6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: 9d0bb49b-21a1-4354-9981-ec5dd9393961, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] !0 **W \> A!@W F"6.3.9600.16497V**W, \> e!@@,W F"B2114-08-18T13:46:32ZRulesEngine**W, \> #!@,W F"ro**W'  > #!'W F" F**W'  > 9!'W F"root\cimv2ro**W 6o  > #! 6oW F" F**W 6o  > 9! 6oW F"root\cimv2ro**W 6o  > #! 6oW F" F**W 6o  > 9! 6oW F"root\cimv2ro**Wq0 ǭl7 ǭl7̩XBtAMsj5http://schemas.microsoft.com/win/2004/08/events/event/A>5=Desktop Window ManagerA}    AD m    Application" FILF-APP-RECAR u ! 9!1#@q0W F"0xd00002feC**WaX  > #!aXW F".0**WaX  > 9!aXW F"root\cimv2**Ww:  > #!w:W F"sys**Ww:  > 9!w:W F"root\cimv2000,**Ww:  > #!w:W F"**Ww:  > 9!w:W F"root\cimv2urre**Wٙ  > #!ٙW F"0.0** Wٙ  > 9!ٙ W F"root\cimv2F**!W  > #!!W F"1] **"W  > 9!"W F"root\cimv20.00**#WQ  > #!Q#W F"V**$WQ  > 9!Q$W F"root\cimv2] 0.**%WQۈ  > #!Qۈ%W F".00**&WQۈ  > 9!Qۈ&W F"root\cimv2chos**'Wt  > #!t'W F"[5]**(Wt  > 9!t(W F"root\cimv2 &**)Wt  > #!t)W F"&***Wt  > 9!t*W F"root\cimv2 &**+WT  > #!T+W F"&**,WT  > 9!T,W F"root\cimv2 &**-W;  > #!;-W F"&**.W;  > 9!;.W F"root\cimv2ǭl7.**/W;  > #!;/W F"V**0W;  > 9!;0W F"root\cimv2A**1WA^  > #!A^1W F"FU**2WA^  > 9!A^2W F"root\cimv2V**3Wd}g  > #!d}g3W F"ENT**4Wd}g  > 9!d}g4W F"root\cimv2474**5Wd}g  > #!d}g5W F"\R**6Wd}g  > 9!d}g6W F"root\cimv22\w**7W  > #!7W F"e\**8W  > 9!8W F"root\cimv22\w**9Wܾ2  > #!ܾ29W F"e\**:Wܾ2  > 9!ܾ2:W F"root\cimv2iPr**;Wܾ2  > #!ܾ2;W F"ft** 9!ܾ2 #!1=W F"ed **>W1  > 9!1>W F"root\cimv2\Win**?WT  > #!T?W F"01_**@WT  > 9!T@W F"root\cimv2s-Us**AWT  > #!TAW F"-1-**BWT  > 9!TBW F"root\cimv2s op**CW"  > #!"CW F"**DW"  > 9!"DW F"root\cimv2 **EWA  > #!AEW F"_Cl**FWA  > 9!AFW F"root\cimv2-329**GWA  > #!AGW F"ma**HWA  > 9!AHW F"root\cimv2D**IW!dL  > #!!dLIW F"**JW!dL  > 9!!dLJW F"root\cimv2t s**KWD  > #!DKW F"p:**LWD  > 9!DLW F"root\cimv2 **MWD  > #!DMW F"**NWD  > 9!DNW F"root\cimv2**OW  > #!OW F"sc**PW  > 9!PW F"root\cimv2D**QW_  > #!_QW F"**RW_  > 9!_RW F"root\cimv2G**SW_  > #!_SW F"0, **TW_  > 9!_TW F"root\cimv2[12]**UW  > #!UW F" F**VW  > 9!VW F"root\cimv2, [9**WW4+  > #!4+WW F"**XW4+  > 9!4+XW F"root\cimv2Wind**YW4+  > #!4+YW F"**ZW4+  > 9!4+ZW F"root\cimv2R**[W(  > #!([W F" **\W(  > 9!(\W F"root\cimv2Mic**]WG  > #!G]W F"**^WG  > 9!G^W F"root\cimv2Wind**_WG  > #!G_W F"**`WG  > 9!G`W F"root\cimv2F-A**aWjy  > #!jyaW F"**bWjy  > 9!jybW F"root\cimv2twa**cW$  > #!$cW F" R**dW$  > 9!$dW F"root\cimv29.uY"**eW$  > #!$eW F" Er**fW$  > 9!$fW F"root\cimv2u**gWyD  > #!yDgW F".0**hWyD  > 9!yDhW F"root\cimv2tyS**iWʌ  > #!ʌiW F"5b**jWʌ  > 9!ʌjW F"root\cimv2CRAS**kWʌ  > #!ʌkW F"dd1**lWʌ  > 9!ʌlW F"root\cimv27dcab_e666932a_012890c609a8e0557-39a7-11e4-80bf-005056a25b294100 **VnJ] =/; #!inJ]V F"**8VX ] E'b  *=!X ]VMicrosoft-Windows-WMIS FF[Application &.&| p)cI8**V1_ ~] #!1_V F"ոfT F