ElfFile B$ElfChnk!c (8`=f?mMFQ &**}ıv+ E'b&E'bUa4UxLIDwEAM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID !  @X!-@}ıv+ Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CECE,ja-jTqnb8D EventDataA9`oData=FileName BC:\Windows\system32\rundll32.exe** YF E'b&  @X!.@YFQP1Q P Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational ^Q ^Bpvj8A-`= ServiceName A)`= ErrorCode appxsvcOp **QaN E'b& @XS!-@QaN!! \ ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exeS**eN E'b& @XS!-@eN!! t ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exer**J6* E'b& @XS!-@J6*!!  ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exe**=* E'b& @XS!-@=*!! ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exe**h' E'b& @XS!-@h'ĺζfζ,  ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exe**k%m' E'b& @XS!-@k%m'ĺζgζ, l  ذĤi 2Microsoft-Windows-AppXDeployment'YJR>:=_Microsoft-Windows-AppXDeployment/Operational CE@C:\Windows\System32\svchost.exeeanager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOM**dG* E'b& XpC! G*4 {E.sO=D d ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :Q  localhostDCOMnullo**eG* E'b& Xp! G*4 {E.sO=D e ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMA**fG* E'b& XpC! G*4 {E.sO=D f ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :Q  localhostDCOMnullo**gG* E'b& Xp! G*4 {E.sO=D g ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMrMan**hG* E'b& XpC! G*4 {E.sO=D h ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :Q  localhostDCOMnull**i* E'b& Xp! *MU1HǛȟD i ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMic**j* E'b& Xp! *hOLŽ D j ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMso**k* E'b& Xp! *hOLŽ D k ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOM-W**l* E'b& Xp! *hOLŽ D l ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMerat**m* E'b& Xp! *hOLŽ D m ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMl :**nk* E'b& Xp! k*&vMBj6LϭD n ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOMgerT**ok* E'b& Xp! k*TBPD o ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOM**pk* E'b& Xp! k*TBPD p ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOM**qk* E'b& Xp! k*TBPD q ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOM**rk* E'b& XpC! k*TBPD r ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :Q  localhostDCOMnullF**sk* E'b& Xp! k*TBPD s ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOMer**tk* E'b& XpC! k*TBPD t ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :Q  localhostDCOMnulln**uؒ* E'b& Xp! ؒ*&V-sLQS%TD hu ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOMws-S**vؒ* E'b& Xp! ؒ*&V-sLQS%TD hv ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOMerve**wؒ* E'b& Xp! ؒ*&V-sLQS%TD w ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOMve**xؒ* E'b& Xp! ؒ*&V-sLQS%TD hx ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOMve**yؒ* E'b& Xp! ؒ*&V-sLQS%TD hy ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational ! J0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOM-S**`zؒ* E'b& Xp!  ؒ*&V-sLQS%TD hz ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational s}C&Ns}C&r+ߧ{_XnbxA-= MachineName A!=Count FILF-APP-RECh`**{ؒ* E'b& Xpo!  ؒ*&V-sLQS%TD h{ ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational zaPz< q4(xA =ID EN|Bz|( E'b& XpC! z|(""D > ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnull**?Ɏ$( E'b& Xp! Ɏ$(CN6T"D ? ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerInventoryDCOM**@A( E'b& Xp! A(CN6T"D @ ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerInventoryDCOM**A]( E'b& Xp! ](CN6T"D A ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerInventoryDCOM**B]( E'b& Xp! ](CN6T"D B ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerInventoryDCOMul**C]( E'b& Xp! ](CN6T"D C ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOM**D]( E'b& XpC! ](CN6T"D D ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnullw**E]( E'b& Xp! ](CN6T"D E ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOM:**F]( E'b& XpC! ](CN6T"D F ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnullo**G]( E'b& Xp! ](CN6T"D G ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMrman**H]( E'b& XpC! ](CN6T"D H ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnulll**I( E'b& Xp! (uTjB2i/ԳD I ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMMa**J( E'b& Xp! (Nej=SHX.TND J ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMerat**K( E'b& Xp! (Nej=SHX.TND K ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0: localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetPerformanceCollectorStateDCOMQ**L( E'b& Xp! (Nej=SHX.TND L ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMet**M( E'b& Xp! (Nej=SHX.TND M ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0. localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerServiceDetailDCOMp**Nh;( E'b& Xp! h;(>bO_TD N ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOM**Oh;( E'b& Xp! h;(0SiGg2F`D O ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOMerve**Ph;( E'b& Xp! h;(0SiGg2F`D P ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0" localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerFeatureDCOMws-S**Qh;( E'b& Xp! h;(0SiGg2F`D Q ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOMws-S**Rh;( E'b& XpC! h;(0SiGg2F`D R ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnull**Sh;( E'b& Xp! h;(0SiGg2F`D S ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOM**Th;( E'b& XpC! h;(0SiGg2F`D T ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational :a  localhostDCOMnulln**UF@( E'b& Xp! F@(Our B! CD U ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOMws\s**VF@( E'b& Xp! F@(Our B! CD V ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0* localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerEventDetailDCOMerve**WF@( E'b& Xp! F@(Our B! CD W ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOMve**XF@( E'b& Xp! F@(Our B! CD X ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOMve**YF@( E'b& Xp! F@(Our B! CD Y ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational QJ0& localhostroot\microsoft\windows\servermanagerMSFT_ServerManagerTasksGetServerBpaResultDCOM**ZF@( E'b& Xp5!  F@(Our B! CD Z ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational s}C&AFILF-APP-RECindo**[F@( E'b& Xp#!  F@(Our B! CD [ ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational z d{E@d?QTo**0\Ǵ* E'b& Xp!  Ǵ*""D \ ذĤi 2Microsoft-Windows-ServerManager-MultiMachinepؽJqhMicrosoft-Windows-ServerManager-MultiMachine/Operational BAy.Scheduler (None, None)InventoryFILF-APP-RECEN|B